# Flog Txt Version 1
# Analyzer Version: 3.0.2
# Analyzer Build Date: May 15 2019 18:28:42
# Log Creation Date: 02.06.2019 09:39:06.470

Process:
	id = "1"
	image_name = "dfylx.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\dfylx.exe"
	page_root = "0x6769b000"
	os_pid = "0x6c8"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x0"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0xda4

	[0029.324] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x7ff92f150000
	[0029.325] GetProcAddress (hModule=0x7ff92f150000, lpProcName="InitializeCriticalSectionEx") returned 0x7ff92f1ad580
	[0029.325] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ff92f150000
	[0029.325] GetProcAddress (hModule=0x7ff92f150000, lpProcName="FlsAlloc") returned 0x7ff92f1bd3e0
	[0029.325] GetProcAddress (hModule=0x7ff92f150000, lpProcName="FlsSetValue") returned 0x7ff92f198c10
	[0029.325] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x800) returned 0x7ff931520000
	[0029.325] GetProcAddress (hModule=0x7ff931520000, lpProcName="EventRegister") returned 0x7ff931f8ad30
	[0029.325] EtwEventRegister (in: ProviderId=0x7ff7f2c84058, EnableCallback=0x7ff7f2c6107c, CallbackContext=0x7ff7f2c84030, RegHandle=0x7ff7f2c84050 | out: RegHandle=0x7ff7f2c84050) returned 0x0
	[0029.325] GetProcAddress (hModule=0x7ff931520000, lpProcName="EventSetInformation") returned 0x7ff931f8aa10
	[0029.325] EtwEventSetInformation (RegHandle=0x3801b52d40bd80, InformationClass=0x2, EventInformation=0x7ff7f2c815a0, InformationLength=0x2b) returned 0x0
	[0029.326] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x7ff92f150000
	[0029.326] GetProcAddress (hModule=0x7ff92f150000, lpProcName="InitializeCriticalSectionEx") returned 0x7ff92f1ad580
	[0029.327] GetProcessHeap () returned 0x1b52d3f0000
	[0029.327] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ff92f150000
	[0029.327] GetProcAddress (hModule=0x7ff92f150000, lpProcName="FlsAlloc") returned 0x7ff92f1bd3e0
	[0029.327] GetLastError () returned 0x36b7
	[0029.327] GetProcAddress (hModule=0x7ff92f150000, lpProcName="FlsGetValue") returned 0x7ff92f192340
	[0029.327] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x3c8) returned 0x1b52d401000
	[0029.327] GetProcAddress (hModule=0x7ff92f150000, lpProcName="FlsSetValue") returned 0x7ff92f198c10
	[0029.327] SetLastError (dwErrCode=0x36b7) 
	[0029.327] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1000) returned 0x1b52d40d360
	[0029.328] GetStartupInfoW (in: lpStartupInfo=0xb1b12ff7c0 | out: lpStartupInfo=0xb1b12ff7c0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0029.328] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0029.328] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0029.329] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0029.329] GetCommandLineA () returned="\"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" "
	[0029.329] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" "
	[0029.329] GetLastError () returned 0x36b7
	[0029.329] SetLastError (dwErrCode=0x36b7) 
	[0029.329] GetLastError () returned 0x36b7
	[0029.329] SetLastError (dwErrCode=0x36b7) 
	[0029.329] GetACP () returned 0x4e4
	[0029.329] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x0, Size=0x228) returned 0x1b52d3ff320
	[0029.329] IsValidCodePage (CodePage=0x4e4) returned 1
	[0029.329] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xb1b12ff790 | out: lpCPInfo=0xb1b12ff790) returned 1
	[0029.329] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0xb1b12ff030 | out: lpCPInfo=0xb1b12ff030) returned 1
	[0029.329] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xb1b12ff050, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.329] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xb1b12ff050, cbMultiByte=256, lpWideCharStr=0xb1b12fed80, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256
	[0029.329] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpCharType=0xb1b12ff350 | out: lpCharType=0xb1b12ff350) returned 1
	[0029.329] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xb1b12ff050, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.329] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xb1b12ff050, cbMultiByte=256, lpWideCharStr=0xb1b12fed20, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256
	[0029.329] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x7ff92f150000
	[0029.329] GetProcAddress (hModule=0x7ff92f150000, lpProcName="LCMapStringEx") returned 0x7ff92f17c800
	[0029.329] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0029.330] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0xb1b12feb10, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌") returned 256
	[0029.330] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ쳌", cchWideChar=256, lpMultiByteStr=0xb1b12ff150, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿÿÿÿÿÿÿÿÿhÉõ1ù\x7f", lpUsedDefaultChar=0x0) returned 256
	[0029.330] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xb1b12ff050, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256
	[0029.330] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0xb1b12ff050, cbMultiByte=256, lpWideCharStr=0xb1b12fed20, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ") returned 256
	[0029.330] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256
	[0029.330] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ", cchSrc=256, lpDestStr=0xb1b12feb10, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌") returned 256
	[0029.330] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ쳌", cchWideChar=256, lpMultiByteStr=0xb1b12ff250, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9fH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256
	[0029.330] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x0, Size=0x100) returned 0x1b52d40b720
	[0029.330] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x7ff7f2c8b390, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dfylx.exe")) returned 0x21
	[0029.330] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x32) returned 0x1b52d401860
	[0029.330] RtlInitializeSListHead (in: ListHead=0x7ff7f2c8b1a0 | out: ListHead=0x7ff7f2c8b1a0) 
	[0029.330] GetLastError () returned 0x0
	[0029.330] SetLastError (dwErrCode=0x0) 
	[0029.330] GetEnvironmentStringsW () returned 0x1b52d40e370*
	[0029.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1342, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1342
	[0029.330] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x0, Size=0x53e) returned 0x1b52d40ee00
	[0029.800] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1342, lpMultiByteStr=0x1b52d40ee00, cbMultiByte=1342, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1342
	[0029.800] FreeEnvironmentStringsW (penv=0x1b52d40e370) returned 1
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x120) returned 0x1b52d4002b0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1f) returned 0x1b52d400d20
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x28) returned 0x1b52d400a80
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x31) returned 0x1b52d3f7690
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x3c) returned 0x1b52d409750
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x31) returned 0x1b52d40eac0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x14) returned 0x1b52d4085b0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x24) returned 0x1b52d400d50
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0xd) returned 0x1b52d4082d0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x17) returned 0x1b52d4089b0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2b) returned 0x1b52d40eb00
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x15) returned 0x1b52d408410
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x17) returned 0x1b52d4088d0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x22) returned 0x1b52d400db0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0xe) returned 0x1b52d4082b0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0xc1) returned 0x1b52d3f7010
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x3e) returned 0x1b52d40a330
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1d) returned 0x1b52d400de0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x48) returned 0x1b52d40a510
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x12) returned 0x1b52d4085f0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x18) returned 0x1b52d4084d0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1b) returned 0x1b52d400e10
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1e) returned 0x1b52d400e40
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x29) returned 0x1b52d40e7c0
	[0029.800] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1e) returned 0x1b52d400e70
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x6b) returned 0x1b52d3f94f0
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x17) returned 0x1b52d4086b0
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0xf) returned 0x1b52d408690
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x16) returned 0x1b52d4089d0
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x28) returned 0x1b52d3fc350
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x27) returned 0x1b52d40f3a0
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x12) returned 0x1b52d408430
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x21) returned 0x1b52d40f6a0
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x10) returned 0x1b52d408850
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d40f430
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x12) returned 0x1b52d408710
	[0029.801] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x0, lpMem=0x1b52d40ee00 | out: hHeap=0x1b52d3f0000) returned 1
	[0029.801] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1000) returned 0x1b52d40fb60
	[0029.801] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7f2c67ef4) returned 0x0
	[0029.801] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb1b12ff6a0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dfylx.exe")) returned 0x21
	[0029.801] GetStartupInfoW (in: lpStartupInfo=0xb1b12ff850 | out: lpStartupInfo=0xb1b12ff850*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) 
	[0029.817] Sleep (dwMilliseconds=0x1388) 
	[0034.822] GetCommandLineW () returned="\"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" "
	[0034.822] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" ", pNumArgs=0xb1b123e048 | out: pNumArgs=0xb1b123e048) returned 0x1b52d3fe5e0*="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe"
	[0034.822] DeleteFileW (lpFileName=0x0) returned 0
	[0034.822] LocalFree (hMem=0x1b52d3fe5e0) returned 0x0
	[0034.822] GetVersionExW (in: lpVersionInformation=0xb1b123e050*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xb1b123e050*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0034.822] GetWindowsDirectoryW (in: lpBuffer=0xb1b123d7a0, uSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0034.822] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0034.823] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="IsWow64Process") returned 0x7ff92fdec1b0
	[0034.823] GetCurrentProcess () returned 0xffffffffffffffff
	[0034.823] IsWow64Process (in: hProcess=0xffffffffffffffff, Wow64Process=0xb1b123d740 | out: Wow64Process=0xb1b123d740) returned 1
	[0034.823] FreeLibrary (hLibModule=0x7ff92fdd0000) returned 1
	[0034.823] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb1b123dd70, nSize=0x140 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dfylx.exe")) returned 0x21
	[0034.823] ShellExecuteW (hwnd=0x0, lpOperation=0x0, lpFile="C:\\WINDOWS\\System32\\cmd.exe", lpParameters="/C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f", lpDirectory=0x0, nShowCmd=0) returned 0x2a
	[0037.799] SetLastError (dwErrCode=0x0) 
	[0037.799] GetCurrentThread () returned 0xfffffffffffffffe
	[0037.799] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0xb1b123e040 | out: TokenHandle=0xb1b123e040*=0x0) returned 0
	[0037.799] GetLastError () returned 0x3f0
	[0037.799] ImpersonateSelf (ImpersonationLevel=0x2) returned 1
	[0037.799] GetCurrentThread () returned 0xfffffffffffffffe
	[0037.799] OpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x28, OpenAsSelf=0, TokenHandle=0xb1b123e040 | out: TokenHandle=0xb1b123e040*=0x260) returned 1
	[0037.799] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xb1b123dff0 | out: lpLuid=0xb1b123dff0*(LowPart=0x14, HighPart=0)) returned 1
	[0037.801] AdjustTokenPrivileges (in: TokenHandle=0x260, DisableAllPrivileges=0, NewState=0xb1b123dff8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0037.801] GetLastError () returned 0x0
	[0037.801] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x248
	[0037.806] Process32FirstW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0037.806] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0037.807] SetLastError (dwErrCode=0x0) 
	[0037.807] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4) returned 0x0
	[0037.807] CloseHandle (hObject=0x0) returned 0
	[0037.807] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x144, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0037.807] SetLastError (dwErrCode=0x0) 
	[0037.807] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x144) returned 0x0
	[0037.808] CloseHandle (hObject=0x0) returned 0
	[0037.808] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x19c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0037.808] SetLastError (dwErrCode=0x0) 
	[0037.808] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x19c) returned 0x0
	[0037.808] CloseHandle (hObject=0x0) returned 0
	[0037.808] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x194, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0037.809] SetLastError (dwErrCode=0x0) 
	[0037.809] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1ec) returned 0x0
	[0037.809] CloseHandle (hObject=0x0) returned 0
	[0037.809] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0037.809] SetLastError (dwErrCode=0x0) 
	[0037.809] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1f8) returned 0x0
	[0037.810] CloseHandle (hObject=0x0) returned 0
	[0037.810] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x234, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1e4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0037.810] SetLastError (dwErrCode=0x0) 
	[0037.810] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x234) returned 0x264
	[0037.810] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x350) returned 1
	[0037.810] GetTokenInformation (in: TokenHandle=0x350, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x0, ReturnLength=0xb1b123dd80) returned 0
	[0037.810] GetProcessHeap () returned 0x1b52d3f0000
	[0037.810] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454d10
	[0037.810] GetTokenInformation (in: TokenHandle=0x350, TokenInformationClass=0x1, TokenInformation=0x1b52d454d10, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454d10, ReturnLength=0xb1b123dd80) returned 1
	[0037.810] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454d20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.811] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454d20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455b00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d4549e0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.812] GetProcessHeap () returned 0x1b52d3f0000
	[0037.812] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454d10 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.812] CloseHandle (hObject=0x264) returned 1
	[0037.812] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x250, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0037.813] SetLastError (dwErrCode=0x0) 
	[0037.813] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x250) returned 0x0
	[0037.813] CloseHandle (hObject=0x0) returned 0
	[0037.813] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x258, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1ec, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0037.813] SetLastError (dwErrCode=0x0) 
	[0037.813] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x258) returned 0x264
	[0037.813] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x358) returned 1
	[0037.813] GetTokenInformation (in: TokenHandle=0x358, TokenInformationClass=0x1, TokenInformation=0x1b52d454d10, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454d10, ReturnLength=0xb1b123dd80) returned 0
	[0037.813] GetProcessHeap () returned 0x1b52d3f0000
	[0037.813] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d4548c0
	[0037.813] GetTokenInformation (in: TokenHandle=0x358, TokenInformationClass=0x1, TokenInformation=0x1b52d4548c0, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4548c0, ReturnLength=0xb1b123dd80) returned 1
	[0037.813] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4548d0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.814] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4548d0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455d80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d4549e0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.815] GetProcessHeap () returned 0x1b52d3f0000
	[0037.815] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4548c0 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.815] CloseHandle (hObject=0x264) returned 1
	[0037.815] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.815] SetLastError (dwErrCode=0x0) 
	[0037.815] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x2b4) returned 0x264
	[0037.815] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x358) returned 0
	[0037.816] CloseHandle (hObject=0x264) returned 1
	[0037.816] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x234, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0037.816] SetLastError (dwErrCode=0x0) 
	[0037.816] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x2c0) returned 0x264
	[0037.816] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x358) returned 0
	[0037.816] CloseHandle (hObject=0x264) returned 1
	[0037.816] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1ec, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0037.817] SetLastError (dwErrCode=0x0) 
	[0037.817] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x2c8) returned 0x264
	[0037.817] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x358) returned 0
	[0037.817] CloseHandle (hObject=0x264) returned 1
	[0037.817] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x318, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.818] SetLastError (dwErrCode=0x0) 
	[0037.818] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x318) returned 0x264
	[0037.818] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x358) returned 0
	[0037.818] CloseHandle (hObject=0x264) returned 1
	[0037.818] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x234, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0037.818] SetLastError (dwErrCode=0x0) 
	[0037.818] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x374) returned 0x264
	[0037.818] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x358) returned 0
	[0037.818] CloseHandle (hObject=0x264) returned 1
	[0037.818] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.819] SetLastError (dwErrCode=0x0) 
	[0037.819] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3c0) returned 0x264
	[0037.819] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x35c) returned 1
	[0037.819] GetTokenInformation (in: TokenHandle=0x35c, TokenInformationClass=0x1, TokenInformation=0x1b52d4548c0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4548c0, ReturnLength=0xb1b123dd80) returned 0
	[0037.819] GetProcessHeap () returned 0x1b52d3f0000
	[0037.819] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454b90
	[0037.819] GetTokenInformation (in: TokenHandle=0x35c, TokenInformationClass=0x1, TokenInformation=0x1b52d454b90, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454b90, ReturnLength=0xb1b123dd80) returned 1
	[0037.819] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454ba0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.844] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454ba0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455cc0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d4549e0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.845] GetProcessHeap () returned 0x1b52d3f0000
	[0037.845] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454b90 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.845] CloseHandle (hObject=0x264) returned 1
	[0037.845] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3d0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.846] SetLastError (dwErrCode=0x0) 
	[0037.846] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3d0) returned 0x264
	[0037.846] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x35c) returned 0
	[0037.846] CloseHandle (hObject=0x264) returned 1
	[0037.846] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.846] SetLastError (dwErrCode=0x0) 
	[0037.846] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x3f4) returned 0x264
	[0037.846] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x35c) returned 0
	[0037.846] CloseHandle (hObject=0x264) returned 1
	[0037.846] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.847] SetLastError (dwErrCode=0x0) 
	[0037.847] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x12c) returned 0x264
	[0037.847] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 1
	[0037.847] GetTokenInformation (in: TokenHandle=0x354, TokenInformationClass=0x1, TokenInformation=0x1b52d454b90, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454b90, ReturnLength=0xb1b123dd80) returned 0
	[0037.847] GetProcessHeap () returned 0x1b52d3f0000
	[0037.847] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454770
	[0037.847] GetTokenInformation (in: TokenHandle=0x354, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 1
	[0037.847] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.848] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455d80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454d10, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.848] GetProcessHeap () returned 0x1b52d3f0000
	[0037.848] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454770 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.849] CloseHandle (hObject=0x264) returned 1
	[0037.849] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x170, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.849] SetLastError (dwErrCode=0x0) 
	[0037.849] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x170) returned 0x264
	[0037.849] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.849] CloseHandle (hObject=0x264) returned 1
	[0037.849] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x480, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.850] SetLastError (dwErrCode=0x0) 
	[0037.850] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x480) returned 0x264
	[0037.850] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.850] CloseHandle (hObject=0x264) returned 1
	[0037.850] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.851] SetLastError (dwErrCode=0x0) 
	[0037.851] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4fc) returned 0x264
	[0037.851] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.851] CloseHandle (hObject=0x264) returned 1
	[0037.851] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x530, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.851] SetLastError (dwErrCode=0x0) 
	[0037.851] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x530) returned 0x264
	[0037.851] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.851] CloseHandle (hObject=0x264) returned 1
	[0037.851] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.852] SetLastError (dwErrCode=0x0) 
	[0037.852] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x538) returned 0x264
	[0037.852] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.852] CloseHandle (hObject=0x264) returned 1
	[0037.852] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0037.853] SetLastError (dwErrCode=0x0) 
	[0037.853] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5c4) returned 0x264
	[0037.853] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.853] CloseHandle (hObject=0x264) returned 1
	[0037.853] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.854] SetLastError (dwErrCode=0x0) 
	[0037.854] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x5f0) returned 0x264
	[0037.854] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.854] CloseHandle (hObject=0x264) returned 1
	[0037.854] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x684, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.854] SetLastError (dwErrCode=0x0) 
	[0037.854] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x684) returned 0x0
	[0037.854] CloseHandle (hObject=0x0) returned 0
	[0037.854] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4fc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0037.855] SetLastError (dwErrCode=0x0) 
	[0037.855] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6a4) returned 0x264
	[0037.855] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x354) returned 0
	[0037.855] CloseHandle (hObject=0x264) returned 1
	[0037.855] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0037.856] SetLastError (dwErrCode=0x0) 
	[0037.856] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6fc) returned 0x264
	[0037.856] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x368) returned 1
	[0037.856] GetTokenInformation (in: TokenHandle=0x368, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 0
	[0037.856] GetProcessHeap () returned 0x1b52d3f0000
	[0037.856] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459c40
	[0037.856] GetTokenInformation (in: TokenHandle=0x368, TokenInformationClass=0x1, TokenInformation=0x1b52d459c40, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c40, ReturnLength=0xb1b123dd80) returned 1
	[0037.856] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.875] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455d20, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455ba0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.876] GetProcessHeap () returned 0x1b52d3f0000
	[0037.876] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459c40 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.876] CloseHandle (hObject=0x264) returned 1
	[0037.876] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x718, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0037.877] SetLastError (dwErrCode=0x0) 
	[0037.877] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x718) returned 0x264
	[0037.877] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x36c) returned 1
	[0037.877] GetTokenInformation (in: TokenHandle=0x36c, TokenInformationClass=0x1, TokenInformation=0x1b52d459c40, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c40, ReturnLength=0xb1b123dd80) returned 0
	[0037.877] GetProcessHeap () returned 0x1b52d3f0000
	[0037.877] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d458d80
	[0037.877] GetTokenInformation (in: TokenHandle=0x36c, TokenInformationClass=0x1, TokenInformation=0x1b52d458d80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458d80, ReturnLength=0xb1b123dd80) returned 1
	[0037.877] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458d90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.877] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458d90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d456080, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455ee0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.878] GetProcessHeap () returned 0x1b52d3f0000
	[0037.878] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d458d80 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.878] CloseHandle (hObject=0x264) returned 1
	[0037.878] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0037.879] SetLastError (dwErrCode=0x0) 
	[0037.879] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7ac) returned 0x264
	[0037.879] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x370) returned 1
	[0037.879] GetTokenInformation (in: TokenHandle=0x370, TokenInformationClass=0x1, TokenInformation=0x1b52d458d80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458d80, ReturnLength=0xb1b123dd80) returned 0
	[0037.879] GetProcessHeap () returned 0x1b52d3f0000
	[0037.879] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d4596c0
	[0037.879] GetTokenInformation (in: TokenHandle=0x370, TokenInformationClass=0x1, TokenInformation=0x1b52d4596c0, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4596c0, ReturnLength=0xb1b123dd80) returned 1
	[0037.879] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4596d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.880] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4596d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455d20, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455aa0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.880] GetProcessHeap () returned 0x1b52d3f0000
	[0037.880] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4596c0 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.880] CloseHandle (hObject=0x264) returned 1
	[0037.880] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0037.881] SetLastError (dwErrCode=0x0) 
	[0037.881] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7f4) returned 0x264
	[0037.881] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x374) returned 1
	[0037.881] GetTokenInformation (in: TokenHandle=0x374, TokenInformationClass=0x1, TokenInformation=0x1b52d4596c0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4596c0, ReturnLength=0xb1b123dd80) returned 0
	[0037.881] GetProcessHeap () returned 0x1b52d3f0000
	[0037.881] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454d10
	[0037.881] GetTokenInformation (in: TokenHandle=0x374, TokenInformationClass=0x1, TokenInformation=0x1b52d454d10, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454d10, ReturnLength=0xb1b123dd80) returned 1
	[0037.881] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454d20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.882] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454d20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d456020, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454770, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.883] GetProcessHeap () returned 0x1b52d3f0000
	[0037.883] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454d10 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.883] CloseHandle (hObject=0x264) returned 1
	[0037.883] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0037.883] SetLastError (dwErrCode=0x0) 
	[0037.884] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x55c) returned 0x0
	[0037.884] CloseHandle (hObject=0x0) returned 0
	[0037.884] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x834, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0037.884] SetLastError (dwErrCode=0x0) 
	[0037.884] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x860) returned 0x264
	[0037.884] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x378) returned 1
	[0037.884] GetTokenInformation (in: TokenHandle=0x378, TokenInformationClass=0x1, TokenInformation=0x1b52d454d10, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454d10, ReturnLength=0xb1b123dd80) returned 0
	[0037.884] GetProcessHeap () returned 0x1b52d3f0000
	[0037.884] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459b80
	[0037.884] GetTokenInformation (in: TokenHandle=0x378, TokenInformationClass=0x1, TokenInformation=0x1b52d459b80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459b80, ReturnLength=0xb1b123dd80) returned 1
	[0037.884] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459b90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.885] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459b90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455e40, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455b20, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.901] GetProcessHeap () returned 0x1b52d3f0000
	[0037.901] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459b80 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.901] CloseHandle (hObject=0x264) returned 1
	[0037.901] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0037.901] SetLastError (dwErrCode=0x0) 
	[0037.901] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x8bc) returned 0x0
	[0037.902] CloseHandle (hObject=0x0) returned 0
	[0037.902] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0037.902] SetLastError (dwErrCode=0x0) 
	[0037.902] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb50) returned 0x264
	[0037.902] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x37c) returned 1
	[0037.902] GetTokenInformation (in: TokenHandle=0x37c, TokenInformationClass=0x1, TokenInformation=0x1b52d459b80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459b80, ReturnLength=0xb1b123dd80) returned 0
	[0037.902] GetProcessHeap () returned 0x1b52d3f0000
	[0037.902] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459600
	[0037.902] GetTokenInformation (in: TokenHandle=0x37c, TokenInformationClass=0x1, TokenInformation=0x1b52d459600, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459600, ReturnLength=0xb1b123dd80) returned 1
	[0037.902] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459610*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.903] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459610*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455ee0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455f60, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.904] GetProcessHeap () returned 0x1b52d3f0000
	[0037.904] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459600 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.904] CloseHandle (hObject=0x264) returned 1
	[0037.904] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0037.904] SetLastError (dwErrCode=0x0) 
	[0037.904] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb58) returned 0x264
	[0037.904] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x380) returned 1
	[0037.904] GetTokenInformation (in: TokenHandle=0x380, TokenInformationClass=0x1, TokenInformation=0x1b52d459600, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459600, ReturnLength=0xb1b123dd80) returned 0
	[0037.904] GetProcessHeap () returned 0x1b52d3f0000
	[0037.904] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459480
	[0037.904] GetTokenInformation (in: TokenHandle=0x380, TokenInformationClass=0x1, TokenInformation=0x1b52d459480, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459480, ReturnLength=0xb1b123dd80) returned 1
	[0037.905] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459490*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.905] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459490*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455f40, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455e80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.906] GetProcessHeap () returned 0x1b52d3f0000
	[0037.906] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459480 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.906] CloseHandle (hObject=0x264) returned 1
	[0037.906] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0037.906] SetLastError (dwErrCode=0x0) 
	[0037.907] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xbf4) returned 0x264
	[0037.907] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x384) returned 1
	[0037.907] GetTokenInformation (in: TokenHandle=0x384, TokenInformationClass=0x1, TokenInformation=0x1b52d459480, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459480, ReturnLength=0xb1b123dd80) returned 0
	[0037.907] GetProcessHeap () returned 0x1b52d3f0000
	[0037.907] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d4599c0
	[0037.907] GetTokenInformation (in: TokenHandle=0x384, TokenInformationClass=0x1, TokenInformation=0x1b52d4599c0, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4599c0, ReturnLength=0xb1b123dd80) returned 1
	[0037.907] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4599d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.907] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4599d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d4560a0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455dc0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.908] GetProcessHeap () returned 0x1b52d3f0000
	[0037.908] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4599c0 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.908] CloseHandle (hObject=0x264) returned 1
	[0037.908] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0037.909] SetLastError (dwErrCode=0x0) 
	[0037.909] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xe04) returned 0x264
	[0037.909] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x384) returned 0
	[0037.909] CloseHandle (hObject=0x264) returned 1
	[0037.909] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x3c0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0037.909] SetLastError (dwErrCode=0x0) 
	[0037.909] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xf14) returned 0x264
	[0037.909] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x388) returned 1
	[0037.909] GetTokenInformation (in: TokenHandle=0x388, TokenInformationClass=0x1, TokenInformation=0x1b52d4599c0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4599c0, ReturnLength=0xb1b123dd80) returned 0
	[0037.909] GetProcessHeap () returned 0x1b52d3f0000
	[0037.909] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459240
	[0037.909] GetTokenInformation (in: TokenHandle=0x388, TokenInformationClass=0x1, TokenInformation=0x1b52d459240, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459240, ReturnLength=0xb1b123dd80) returned 1
	[0037.910] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459250*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.910] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459250*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455fe0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455ca0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.911] GetProcessHeap () returned 0x1b52d3f0000
	[0037.911] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459240 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.911] CloseHandle (hObject=0x264) returned 1
	[0037.911] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1
	[0037.911] SetLastError (dwErrCode=0x0) 
	[0037.911] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfac) returned 0x264
	[0037.912] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x38c) returned 1
	[0037.912] GetTokenInformation (in: TokenHandle=0x38c, TokenInformationClass=0x1, TokenInformation=0x1b52d459240, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459240, ReturnLength=0xb1b123dd80) returned 0
	[0037.912] GetProcessHeap () returned 0x1b52d3f0000
	[0037.912] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454770
	[0037.912] GetTokenInformation (in: TokenHandle=0x38c, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 1
	[0037.912] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.912] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455dc0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454c20, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.913] GetProcessHeap () returned 0x1b52d3f0000
	[0037.913] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454770 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.913] CloseHandle (hObject=0x264) returned 1
	[0037.913] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0037.914] SetLastError (dwErrCode=0x0) 
	[0037.914] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfbc) returned 0x264
	[0037.914] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x390) returned 1
	[0037.914] GetTokenInformation (in: TokenHandle=0x390, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 0
	[0037.914] GetProcessHeap () returned 0x1b52d3f0000
	[0037.914] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454b30
	[0037.914] GetTokenInformation (in: TokenHandle=0x390, TokenInformationClass=0x1, TokenInformation=0x1b52d454b30, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454b30, ReturnLength=0xb1b123dd80) returned 1
	[0037.914] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454b40*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.934] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454b40*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455e40, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454d10, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.935] GetProcessHeap () returned 0x1b52d3f0000
	[0037.935] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454b30 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.935] CloseHandle (hObject=0x264) returned 1
	[0037.935] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="OfficeC2RClient.exe")) returned 1
	[0037.935] SetLastError (dwErrCode=0x0) 
	[0037.936] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfc8) returned 0x264
	[0037.936] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x394) returned 1
	[0037.936] GetTokenInformation (in: TokenHandle=0x394, TokenInformationClass=0x1, TokenInformation=0x1b52d454b30, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454b30, ReturnLength=0xb1b123dd80) returned 0
	[0037.936] GetProcessHeap () returned 0x1b52d3f0000
	[0037.936] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454bf0
	[0037.936] GetTokenInformation (in: TokenHandle=0x394, TokenInformationClass=0x1, TokenInformation=0x1b52d454bf0, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454bf0, ReturnLength=0xb1b123dd80) returned 1
	[0037.936] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454c00*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.936] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454c00*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455ce0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454d10, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.937] GetProcessHeap () returned 0x1b52d3f0000
	[0037.937] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454bf0 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.937] CloseHandle (hObject=0x264) returned 1
	[0037.937] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1
	[0037.938] SetLastError (dwErrCode=0x0) 
	[0037.938] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfd0) returned 0x264
	[0037.938] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x398) returned 1
	[0037.938] GetTokenInformation (in: TokenHandle=0x398, TokenInformationClass=0x1, TokenInformation=0x1b52d454bf0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454bf0, ReturnLength=0xb1b123dd80) returned 0
	[0037.938] GetProcessHeap () returned 0x1b52d3f0000
	[0037.938] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459280
	[0037.938] GetTokenInformation (in: TokenHandle=0x398, TokenInformationClass=0x1, TokenInformation=0x1b52d459280, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459280, ReturnLength=0xb1b123dd80) returned 1
	[0037.938] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459290*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.939] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459290*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d456100, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455f00, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.939] GetProcessHeap () returned 0x1b52d3f0000
	[0037.939] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459280 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.939] CloseHandle (hObject=0x264) returned 1
	[0037.939] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0037.940] SetLastError (dwErrCode=0x0) 
	[0037.940] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfd8) returned 0x264
	[0037.940] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x39c) returned 1
	[0037.940] GetTokenInformation (in: TokenHandle=0x39c, TokenInformationClass=0x1, TokenInformation=0x1b52d459280, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459280, ReturnLength=0xb1b123dd80) returned 0
	[0037.940] GetProcessHeap () returned 0x1b52d3f0000
	[0037.940] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d4549e0
	[0037.940] GetTokenInformation (in: TokenHandle=0x39c, TokenInformationClass=0x1, TokenInformation=0x1b52d4549e0, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4549e0, ReturnLength=0xb1b123dd80) returned 1
	[0037.940] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4549f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.941] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4549f0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455c20, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454b30, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.941] GetProcessHeap () returned 0x1b52d3f0000
	[0037.941] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4549e0 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.941] CloseHandle (hObject=0x264) returned 1
	[0037.941] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0037.942] SetLastError (dwErrCode=0x0) 
	[0037.942] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfe4) returned 0x264
	[0037.942] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3a0) returned 1
	[0037.942] GetTokenInformation (in: TokenHandle=0x3a0, TokenInformationClass=0x1, TokenInformation=0x1b52d4549e0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4549e0, ReturnLength=0xb1b123dd80) returned 0
	[0037.942] GetProcessHeap () returned 0x1b52d3f0000
	[0037.942] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454770
	[0037.942] GetTokenInformation (in: TokenHandle=0x3a0, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 1
	[0037.942] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0037.943] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d4560c0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454d10, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0037.943] GetProcessHeap () returned 0x1b52d3f0000
	[0037.943] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454770 | out: hHeap=0x1b52d3f0000) returned 1
	[0037.943] CloseHandle (hObject=0x264) returned 1
	[0037.944] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xfec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0037.944] SetLastError (dwErrCode=0x0) 
	[0037.944] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfec) returned 0x264
	[0037.944] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3a4) returned 1
	[0037.944] GetTokenInformation (in: TokenHandle=0x3a4, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 0
	[0037.944] GetProcessHeap () returned 0x1b52d3f0000
	[0037.944] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454d10
	[0037.944] GetTokenInformation (in: TokenHandle=0x3a4, TokenInformationClass=0x1, TokenInformation=0x1b52d454d10, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454d10, ReturnLength=0xb1b123dd80) returned 1
	[0037.944] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454d20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.013] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454d20*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455f00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454920, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.014] GetProcessHeap () returned 0x1b52d3f0000
	[0038.014] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454d10 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.014] CloseHandle (hObject=0x264) returned 1
	[0038.014] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="msoia.exe")) returned 1
	[0038.015] SetLastError (dwErrCode=0x0) 
	[0038.015] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xff8) returned 0x264
	[0038.015] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3a8) returned 1
	[0038.015] GetTokenInformation (in: TokenHandle=0x3a8, TokenInformationClass=0x1, TokenInformation=0x1b52d454d10, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454d10, ReturnLength=0xb1b123dd80) returned 0
	[0038.015] GetProcessHeap () returned 0x1b52d3f0000
	[0038.015] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d458d80
	[0038.015] GetTokenInformation (in: TokenHandle=0x3a8, TokenInformationClass=0x1, TokenInformation=0x1b52d458d80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458d80, ReturnLength=0xb1b123dd80) returned 1
	[0038.015] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458d90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.015] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458d90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455b80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d456160, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.016] GetProcessHeap () returned 0x1b52d3f0000
	[0038.016] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d458d80 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.016] CloseHandle (hObject=0x264) returned 1
	[0038.016] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3c0, pcPriClassBase=6, dwFlags=0x0, szExeFile="AppHostRegistrationVerifier.exe")) returned 1
	[0038.017] SetLastError (dwErrCode=0x0) 
	[0038.017] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc14) returned 0x264
	[0038.017] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3ac) returned 1
	[0038.017] GetTokenInformation (in: TokenHandle=0x3ac, TokenInformationClass=0x1, TokenInformation=0x1b52d458d80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458d80, ReturnLength=0xb1b123dd80) returned 0
	[0038.017] GetProcessHeap () returned 0x1b52d3f0000
	[0038.017] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459500
	[0038.017] GetTokenInformation (in: TokenHandle=0x3ac, TokenInformationClass=0x1, TokenInformation=0x1b52d459500, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459500, ReturnLength=0xb1b123dd80) returned 1
	[0038.017] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459510*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.018] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459510*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455e40, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455b80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.018] GetProcessHeap () returned 0x1b52d3f0000
	[0038.018] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459500 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.018] CloseHandle (hObject=0x264) returned 1
	[0038.018] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="screensaver.exe")) returned 1
	[0038.019] SetLastError (dwErrCode=0x0) 
	[0038.019] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4b0) returned 0x264
	[0038.019] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3b0) returned 1
	[0038.019] GetTokenInformation (in: TokenHandle=0x3b0, TokenInformationClass=0x1, TokenInformation=0x1b52d459500, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459500, ReturnLength=0xb1b123dd80) returned 0
	[0038.019] GetProcessHeap () returned 0x1b52d3f0000
	[0038.019] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459c00
	[0038.019] GetTokenInformation (in: TokenHandle=0x3b0, TokenInformationClass=0x1, TokenInformation=0x1b52d459c00, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c00, ReturnLength=0xb1b123dd80) returned 1
	[0038.019] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.020] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455d20, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455c80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.020] GetProcessHeap () returned 0x1b52d3f0000
	[0038.020] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459c00 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.020] CloseHandle (hObject=0x264) returned 1
	[0038.020] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x49c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="edge_empty_suite.exe")) returned 1
	[0038.021] SetLastError (dwErrCode=0x0) 
	[0038.021] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x49c) returned 0x264
	[0038.021] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3b4) returned 1
	[0038.021] GetTokenInformation (in: TokenHandle=0x3b4, TokenInformationClass=0x1, TokenInformation=0x1b52d459c00, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c00, ReturnLength=0xb1b123dd80) returned 0
	[0038.021] GetProcessHeap () returned 0x1b52d3f0000
	[0038.021] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459700
	[0038.021] GetTokenInformation (in: TokenHandle=0x3b4, TokenInformationClass=0x1, TokenInformation=0x1b52d459700, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459700, ReturnLength=0xb1b123dd80) returned 1
	[0038.021] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459710*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.022] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459710*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455aa0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d456020, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.023] GetProcessHeap () returned 0x1b52d3f0000
	[0038.023] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459700 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.023] CloseHandle (hObject=0x264) returned 1
	[0038.023] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x47c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="religion.exe")) returned 1
	[0038.023] SetLastError (dwErrCode=0x0) 
	[0038.023] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x47c) returned 0x264
	[0038.023] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3b8) returned 1
	[0038.023] GetTokenInformation (in: TokenHandle=0x3b8, TokenInformationClass=0x1, TokenInformation=0x1b52d459700, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459700, ReturnLength=0xb1b123dd80) returned 0
	[0038.023] GetProcessHeap () returned 0x1b52d3f0000
	[0038.023] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459040
	[0038.023] GetTokenInformation (in: TokenHandle=0x3b8, TokenInformationClass=0x1, TokenInformation=0x1b52d459040, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459040, ReturnLength=0xb1b123dd80) returned 1
	[0038.023] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459050*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.151] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459050*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455b80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455fc0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.152] GetProcessHeap () returned 0x1b52d3f0000
	[0038.152] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459040 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.152] CloseHandle (hObject=0x264) returned 1
	[0038.152] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x468, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="spirit forces.exe")) returned 1
	[0038.152] SetLastError (dwErrCode=0x0) 
	[0038.152] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x468) returned 0x264
	[0038.152] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3bc) returned 1
	[0038.152] GetTokenInformation (in: TokenHandle=0x3bc, TokenInformationClass=0x1, TokenInformation=0x1b52d459040, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459040, ReturnLength=0xb1b123dd80) returned 0
	[0038.152] GetProcessHeap () returned 0x1b52d3f0000
	[0038.152] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d458f80
	[0038.152] GetTokenInformation (in: TokenHandle=0x3bc, TokenInformationClass=0x1, TokenInformation=0x1b52d458f80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458f80, ReturnLength=0xb1b123dd80) returned 1
	[0038.152] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458f90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.153] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458f90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455fa0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d456080, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.154] GetProcessHeap () returned 0x1b52d3f0000
	[0038.154] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d458f80 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.154] CloseHandle (hObject=0x264) returned 1
	[0038.154] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="guests_production.exe")) returned 1
	[0038.154] SetLastError (dwErrCode=0x0) 
	[0038.154] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4a0) returned 0x264
	[0038.154] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3c0) returned 1
	[0038.154] GetTokenInformation (in: TokenHandle=0x3c0, TokenInformationClass=0x1, TokenInformation=0x1b52d458f80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458f80, ReturnLength=0xb1b123dd80) returned 0
	[0038.154] GetProcessHeap () returned 0x1b52d3f0000
	[0038.154] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d458dc0
	[0038.154] GetTokenInformation (in: TokenHandle=0x3c0, TokenInformationClass=0x1, TokenInformation=0x1b52d458dc0, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458dc0, ReturnLength=0xb1b123dd80) returned 1
	[0038.155] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458dd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.155] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458dd0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455c80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455a40, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.156] GetProcessHeap () returned 0x1b52d3f0000
	[0038.156] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d458dc0 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.156] CloseHandle (hObject=0x264) returned 1
	[0038.156] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x770, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="archiveddeemedshirts.exe")) returned 1
	[0038.156] SetLastError (dwErrCode=0x0) 
	[0038.156] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x770) returned 0x264
	[0038.156] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3c4) returned 1
	[0038.157] GetTokenInformation (in: TokenHandle=0x3c4, TokenInformationClass=0x1, TokenInformation=0x1b52d458dc0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458dc0, ReturnLength=0xb1b123dd80) returned 0
	[0038.157] GetProcessHeap () returned 0x1b52d3f0000
	[0038.157] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d4598c0
	[0038.157] GetTokenInformation (in: TokenHandle=0x3c4, TokenInformationClass=0x1, TokenInformation=0x1b52d4598c0, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4598c0, ReturnLength=0xb1b123dd80) returned 1
	[0038.157] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4598d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.157] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4598d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455f40, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455b00, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.158] GetProcessHeap () returned 0x1b52d3f0000
	[0038.158] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4598c0 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.158] CloseHandle (hObject=0x264) returned 1
	[0038.158] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="him.exe")) returned 1
	[0038.159] SetLastError (dwErrCode=0x0) 
	[0038.159] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x9e0) returned 0x264
	[0038.159] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3c8) returned 1
	[0038.159] GetTokenInformation (in: TokenHandle=0x3c8, TokenInformationClass=0x1, TokenInformation=0x1b52d4598c0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4598c0, ReturnLength=0xb1b123dd80) returned 0
	[0038.159] GetProcessHeap () returned 0x1b52d3f0000
	[0038.159] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459100
	[0038.159] GetTokenInformation (in: TokenHandle=0x3c8, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 1
	[0038.159] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.159] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455b20, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455ce0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.160] GetProcessHeap () returned 0x1b52d3f0000
	[0038.160] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459100 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.160] CloseHandle (hObject=0x264) returned 1
	[0038.160] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xcf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="anymore_recorder.exe")) returned 1
	[0038.161] SetLastError (dwErrCode=0x0) 
	[0038.161] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xcf8) returned 0x264
	[0038.161] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3cc) returned 1
	[0038.161] GetTokenInformation (in: TokenHandle=0x3cc, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 0
	[0038.161] GetProcessHeap () returned 0x1b52d3f0000
	[0038.161] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459c40
	[0038.161] GetTokenInformation (in: TokenHandle=0x3cc, TokenInformationClass=0x1, TokenInformation=0x1b52d459c40, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c40, ReturnLength=0xb1b123dd80) returned 1
	[0038.161] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.202] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c50*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455ae0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455a00, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.203] GetProcessHeap () returned 0x1b52d3f0000
	[0038.203] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459c40 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.203] CloseHandle (hObject=0x264) returned 1
	[0038.203] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xd0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="kw-necklace-lee.exe")) returned 1
	[0038.204] SetLastError (dwErrCode=0x0) 
	[0038.204] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd0c) returned 0x264
	[0038.204] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3d0) returned 1
	[0038.204] GetTokenInformation (in: TokenHandle=0x3d0, TokenInformationClass=0x1, TokenInformation=0x1b52d459c40, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c40, ReturnLength=0xb1b123dd80) returned 0
	[0038.204] GetProcessHeap () returned 0x1b52d3f0000
	[0038.204] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d458f80
	[0038.204] GetTokenInformation (in: TokenHandle=0x3d0, TokenInformationClass=0x1, TokenInformation=0x1b52d458f80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458f80, ReturnLength=0xb1b123dd80) returned 1
	[0038.204] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458f90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.204] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d458f90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455cc0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d456060, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.205] GetProcessHeap () returned 0x1b52d3f0000
	[0038.205] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d458f80 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.205] CloseHandle (hObject=0x264) returned 1
	[0038.205] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x9b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="surfaces.exe")) returned 1
	[0038.206] SetLastError (dwErrCode=0x0) 
	[0038.206] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x9b0) returned 0x264
	[0038.206] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3d4) returned 1
	[0038.206] GetTokenInformation (in: TokenHandle=0x3d4, TokenInformationClass=0x1, TokenInformation=0x1b52d458f80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d458f80, ReturnLength=0xb1b123dd80) returned 0
	[0038.206] GetProcessHeap () returned 0x1b52d3f0000
	[0038.206] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459440
	[0038.206] GetTokenInformation (in: TokenHandle=0x3d4, TokenInformationClass=0x1, TokenInformation=0x1b52d459440, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459440, ReturnLength=0xb1b123dd80) returned 1
	[0038.206] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459450*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.207] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459450*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455be0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455da0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.207] GetProcessHeap () returned 0x1b52d3f0000
	[0038.208] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459440 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.208] CloseHandle (hObject=0x264) returned 1
	[0038.208] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xa9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="removableglobaldiverse.exe")) returned 1
	[0038.208] SetLastError (dwErrCode=0x0) 
	[0038.208] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xa9c) returned 0x264
	[0038.208] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3d8) returned 1
	[0038.208] GetTokenInformation (in: TokenHandle=0x3d8, TokenInformationClass=0x1, TokenInformation=0x1b52d459440, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459440, ReturnLength=0xb1b123dd80) returned 0
	[0038.208] GetProcessHeap () returned 0x1b52d3f0000
	[0038.208] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459800
	[0038.208] GetTokenInformation (in: TokenHandle=0x3d8, TokenInformationClass=0x1, TokenInformation=0x1b52d459800, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459800, ReturnLength=0xb1b123dd80) returned 1
	[0038.208] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459810*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.209] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459810*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d456060, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d456080, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.210] GetProcessHeap () returned 0x1b52d3f0000
	[0038.210] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459800 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.210] CloseHandle (hObject=0x264) returned 1
	[0038.210] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x784, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="bravescuba.exe")) returned 1
	[0038.210] SetLastError (dwErrCode=0x0) 
	[0038.211] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x784) returned 0x264
	[0038.211] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3dc) returned 1
	[0038.211] GetTokenInformation (in: TokenHandle=0x3dc, TokenInformationClass=0x1, TokenInformation=0x1b52d459800, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459800, ReturnLength=0xb1b123dd80) returned 0
	[0038.211] GetProcessHeap () returned 0x1b52d3f0000
	[0038.211] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d4593c0
	[0038.211] GetTokenInformation (in: TokenHandle=0x3dc, TokenInformationClass=0x1, TokenInformation=0x1b52d4593c0, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4593c0, ReturnLength=0xb1b123dd80) returned 1
	[0038.211] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4593d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.211] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4593d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455e40, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d456160, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.212] GetProcessHeap () returned 0x1b52d3f0000
	[0038.212] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4593c0 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.212] CloseHandle (hObject=0x264) returned 1
	[0038.212] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="delivering product tank.exe")) returned 1
	[0038.213] SetLastError (dwErrCode=0x0) 
	[0038.213] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd44) returned 0x264
	[0038.213] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3e0) returned 1
	[0038.213] GetTokenInformation (in: TokenHandle=0x3e0, TokenInformationClass=0x1, TokenInformation=0x1b52d4593c0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4593c0, ReturnLength=0xb1b123dd80) returned 0
	[0038.213] GetProcessHeap () returned 0x1b52d3f0000
	[0038.213] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459a00
	[0038.213] GetTokenInformation (in: TokenHandle=0x3e0, TokenInformationClass=0x1, TokenInformation=0x1b52d459a00, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459a00, ReturnLength=0xb1b123dd80) returned 1
	[0038.213] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459a10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.240] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459a10*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455b00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455d80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.241] GetProcessHeap () returned 0x1b52d3f0000
	[0038.241] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459a00 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.241] CloseHandle (hObject=0x264) returned 1
	[0038.241] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xd2c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="exhaustwires.exe")) returned 1
	[0038.241] SetLastError (dwErrCode=0x0) 
	[0038.241] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd2c) returned 0x264
	[0038.242] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3e4) returned 1
	[0038.242] GetTokenInformation (in: TokenHandle=0x3e4, TokenInformationClass=0x1, TokenInformation=0x1b52d459a00, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459a00, ReturnLength=0xb1b123dd80) returned 0
	[0038.242] GetProcessHeap () returned 0x1b52d3f0000
	[0038.242] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459100
	[0038.242] GetTokenInformation (in: TokenHandle=0x3e4, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 1
	[0038.242] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.242] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455aa0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455b80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.243] GetProcessHeap () returned 0x1b52d3f0000
	[0038.243] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459100 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.243] CloseHandle (hObject=0x264) returned 1
	[0038.243] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="payingbasin.exe")) returned 1
	[0038.244] SetLastError (dwErrCode=0x0) 
	[0038.244] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc30) returned 0x264
	[0038.244] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3e8) returned 1
	[0038.244] GetTokenInformation (in: TokenHandle=0x3e8, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 0
	[0038.244] GetProcessHeap () returned 0x1b52d3f0000
	[0038.244] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459040
	[0038.244] GetTokenInformation (in: TokenHandle=0x3e8, TokenInformationClass=0x1, TokenInformation=0x1b52d459040, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459040, ReturnLength=0xb1b123dd80) returned 1
	[0038.244] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459050*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.245] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459050*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455f80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455b80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.245] GetProcessHeap () returned 0x1b52d3f0000
	[0038.245] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459040 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.245] CloseHandle (hObject=0x264) returned 1
	[0038.245] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="emission.exe")) returned 1
	[0038.246] SetLastError (dwErrCode=0x0) 
	[0038.246] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd58) returned 0x264
	[0038.246] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3ec) returned 1
	[0038.246] GetTokenInformation (in: TokenHandle=0x3ec, TokenInformationClass=0x1, TokenInformation=0x1b52d459040, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459040, ReturnLength=0xb1b123dd80) returned 0
	[0038.246] GetProcessHeap () returned 0x1b52d3f0000
	[0038.246] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459700
	[0038.246] GetTokenInformation (in: TokenHandle=0x3ec, TokenInformationClass=0x1, TokenInformation=0x1b52d459700, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459700, ReturnLength=0xb1b123dd80) returned 1
	[0038.246] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459710*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.247] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459710*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455ae0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455a20, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.247] GetProcessHeap () returned 0x1b52d3f0000
	[0038.247] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459700 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.247] CloseHandle (hObject=0x264) returned 1
	[0038.248] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xd70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="using sandy.exe")) returned 1
	[0038.248] SetLastError (dwErrCode=0x0) 
	[0038.248] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd70) returned 0x264
	[0038.248] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3f0) returned 1
	[0038.248] GetTokenInformation (in: TokenHandle=0x3f0, TokenInformationClass=0x1, TokenInformation=0x1b52d459700, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459700, ReturnLength=0xb1b123dd80) returned 0
	[0038.248] GetProcessHeap () returned 0x1b52d3f0000
	[0038.248] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459c80
	[0038.248] GetTokenInformation (in: TokenHandle=0x3f0, TokenInformationClass=0x1, TokenInformation=0x1b52d459c80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c80, ReturnLength=0xb1b123dd80) returned 1
	[0038.248] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.249] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459c90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455d80, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455ba0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.250] GetProcessHeap () returned 0x1b52d3f0000
	[0038.250] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459c80 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.250] CloseHandle (hObject=0x264) returned 1
	[0038.250] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xac4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="adjusted_eyes_shoot.exe")) returned 1
	[0038.293] SetLastError (dwErrCode=0x0) 
	[0038.293] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xac4) returned 0x264
	[0038.293] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3f4) returned 1
	[0038.293] GetTokenInformation (in: TokenHandle=0x3f4, TokenInformationClass=0x1, TokenInformation=0x1b52d459c80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459c80, ReturnLength=0xb1b123dd80) returned 0
	[0038.294] GetProcessHeap () returned 0x1b52d3f0000
	[0038.294] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d4596c0
	[0038.294] GetTokenInformation (in: TokenHandle=0x3f4, TokenInformationClass=0x1, TokenInformation=0x1b52d4596c0, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4596c0, ReturnLength=0xb1b123dd80) returned 1
	[0038.294] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4596d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.294] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4596d0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455ce0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455dc0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.295] GetProcessHeap () returned 0x1b52d3f0000
	[0038.295] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4596c0 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.295] CloseHandle (hObject=0x264) returned 1
	[0038.295] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="pmc.exe")) returned 1
	[0038.296] SetLastError (dwErrCode=0x0) 
	[0038.296] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x58) returned 0x264
	[0038.296] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3f8) returned 1
	[0038.296] GetTokenInformation (in: TokenHandle=0x3f8, TokenInformationClass=0x1, TokenInformation=0x1b52d4596c0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4596c0, ReturnLength=0xb1b123dd80) returned 0
	[0038.296] GetProcessHeap () returned 0x1b52d3f0000
	[0038.296] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459a80
	[0038.296] GetTokenInformation (in: TokenHandle=0x3f8, TokenInformationClass=0x1, TokenInformation=0x1b52d459a80, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459a80, ReturnLength=0xb1b123dd80) returned 1
	[0038.296] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459a90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.297] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459a90*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455d00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455d80, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.297] GetProcessHeap () returned 0x1b52d3f0000
	[0038.297] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459a80 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.297] CloseHandle (hObject=0x264) returned 1
	[0038.297] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2b4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0038.298] SetLastError (dwErrCode=0x0) 
	[0038.298] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7fc) returned 0x264
	[0038.298] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x3fc) returned 1
	[0038.298] GetTokenInformation (in: TokenHandle=0x3fc, TokenInformationClass=0x1, TokenInformation=0x1b52d459a80, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459a80, ReturnLength=0xb1b123dd80) returned 0
	[0038.298] GetProcessHeap () returned 0x1b52d3f0000
	[0038.298] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459100
	[0038.298] GetTokenInformation (in: TokenHandle=0x3fc, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 1
	[0038.298] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.299] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d456160, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455a40, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.300] GetProcessHeap () returned 0x1b52d3f0000
	[0038.300] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459100 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.300] CloseHandle (hObject=0x264) returned 1
	[0038.300] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xdf8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfe4, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0038.300] SetLastError (dwErrCode=0x0) 
	[0038.300] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xdf8) returned 0x264
	[0038.301] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x404) returned 1
	[0038.301] GetTokenInformation (in: TokenHandle=0x404, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 0
	[0038.301] GetProcessHeap () returned 0x1b52d3f0000
	[0038.301] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d454770
	[0038.301] GetTokenInformation (in: TokenHandle=0x404, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 1
	[0038.301] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.301] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d454780*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455c00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454da0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.302] GetProcessHeap () returned 0x1b52d3f0000
	[0038.302] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d454770 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.302] CloseHandle (hObject=0x264) returned 1
	[0038.302] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x744, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xfbc, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0038.303] SetLastError (dwErrCode=0x0) 
	[0038.303] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x744) returned 0x264
	[0038.303] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x408) returned 1
	[0038.303] GetTokenInformation (in: TokenHandle=0x408, TokenInformationClass=0x1, TokenInformation=0x1b52d454770, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d454770, ReturnLength=0xb1b123dd80) returned 0
	[0038.303] GetProcessHeap () returned 0x1b52d3f0000
	[0038.303] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x1c) returned 0x1b52d4547d0
	[0038.303] GetTokenInformation (in: TokenHandle=0x408, TokenInformationClass=0x1, TokenInformation=0x1b52d4547d0, TokenInformationLength=0x1c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4547d0, ReturnLength=0xb1b123dd80) returned 1
	[0038.303] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4547e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.304] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d4547e0*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=0x12), Name=0x1b52d455dc0, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d454da0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="SYSTEM", cchName=0xb1b123dd88, ReferencedDomainName="NT AUTHORITY", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.305] GetProcessHeap () returned 0x1b52d3f0000
	[0038.305] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d4547d0 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.305] CloseHandle (hObject=0x264) returned 1
	[0038.305] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x6c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x860, pcPriClassBase=8, dwFlags=0x0, szExeFile="DfyLx.exe")) returned 1
	[0038.339] SetLastError (dwErrCode=0x0) 
	[0038.339] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6c8) returned 0x264
	[0038.339] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x40c) returned 1
	[0038.339] GetTokenInformation (in: TokenHandle=0x40c, TokenInformationClass=0x1, TokenInformation=0x1b52d4547d0, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d4547d0, ReturnLength=0xb1b123dd80) returned 0
	[0038.339] GetProcessHeap () returned 0x1b52d3f0000
	[0038.339] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459380
	[0038.339] GetTokenInformation (in: TokenHandle=0x40c, TokenInformationClass=0x1, TokenInformation=0x1b52d459380, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459380, ReturnLength=0xb1b123dd80) returned 1
	[0038.339] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459390*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.340] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459390*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455f00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455e40, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.341] GetProcessHeap () returned 0x1b52d3f0000
	[0038.341] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459380 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.341] CloseHandle (hObject=0x264) returned 1
	[0038.341] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x250, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0038.341] SetLastError (dwErrCode=0x0) 
	[0038.341] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xe64) returned 0x264
	[0038.341] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x40c) returned 0
	[0038.341] CloseHandle (hObject=0x264) returned 1
	[0038.341] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x6c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0038.342] SetLastError (dwErrCode=0x0) 
	[0038.342] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1b4) returned 0x264
	[0038.342] OpenProcessToken (in: ProcessHandle=0x264, DesiredAccess=0x20008, TokenHandle=0xb1b123dd90 | out: TokenHandle=0xb1b123dd90*=0x410) returned 1
	[0038.342] GetTokenInformation (in: TokenHandle=0x410, TokenInformationClass=0x1, TokenInformation=0x1b52d459380, TokenInformationLength=0x0, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459380, ReturnLength=0xb1b123dd80) returned 0
	[0038.342] GetProcessHeap () returned 0x1b52d3f0000
	[0038.342] RtlAllocateHeap (HeapHandle=0x1b52d3f0000, Flags=0x8, Size=0x2c) returned 0x1b52d459100
	[0038.342] GetTokenInformation (in: TokenHandle=0x410, TokenInformationClass=0x1, TokenInformation=0x1b52d459100, TokenInformationLength=0x2c, ReturnLength=0xb1b123dd80 | out: TokenInformation=0x1b52d459100, ReturnLength=0xb1b123dd80) returned 1
	[0038.342] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name=0x0, cchName=0xb1b123dd88, ReferencedDomainName=0x0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 0
	[0038.343] LookupAccountSidW (in: lpSystemName=0x0, Sid=0x1b52d459110*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), Name=0x1b52d455a00, cchName=0xb1b123dd88, ReferencedDomainName=0x1b52d455fa0, cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c | out: Name="FD1HVy", cchName=0xb1b123dd88, ReferencedDomainName="NQDPDE", cchReferencedDomainName=0xb1b123dd84, peUse=0xb1b123dd8c) returned 1
	[0038.344] GetProcessHeap () returned 0x1b52d3f0000
	[0038.344] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x1, lpMem=0x1b52d459100 | out: hHeap=0x1b52d3f0000) returned 1
	[0038.344] CloseHandle (hObject=0x264) returned 1
	[0038.344] Process32NextW (in: hSnapshot=0x248, lppe=0xb1b123dda0 | out: lppe=0xb1b123dda0*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x6c8, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 0
	[0038.344] CloseHandle (hObject=0x248) returned 1
	[0038.344] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb1b12ff7c0, nSize=0x64 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dfylx.exe")) returned 0x21
	[0038.344] SetLastError (dwErrCode=0x0) 
	[0038.344] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x6fc) returned 0x248
	[0038.344] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0038.344] SetLastError (dwErrCode=0x0) 
	[0038.345] VirtualAllocEx (hProcess=0x248, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0038.517] WriteProcessMemory (in: hProcess=0x248, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0038.645] CreateRemoteThread (in: hProcess=0x248, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x414
	[0038.646] Sleep (dwMilliseconds=0x12c) 
	[0038.962] SetLastError (dwErrCode=0x0) 
	[0038.962] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x718) returned 0x264
	[0038.962] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0038.962] SetLastError (dwErrCode=0x0) 
	[0038.962] VirtualAllocEx (hProcess=0x264, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0038.999] WriteProcessMemory (in: hProcess=0x264, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0039.077] CreateRemoteThread (in: hProcess=0x264, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c
	[0039.077] Sleep (dwMilliseconds=0x12c) 
	[0039.420] SetLastError (dwErrCode=0x0) 
	[0039.420] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7ac) returned 0x418
	[0039.420] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0039.420] SetLastError (dwErrCode=0x0) 
	[0039.420] VirtualAllocEx (hProcess=0x418, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0039.528] WriteProcessMemory (in: hProcess=0x418, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0039.632] CreateRemoteThread (in: hProcess=0x418, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x424
	[0039.632] Sleep (dwMilliseconds=0x12c) 
	[0039.940] SetLastError (dwErrCode=0x0) 
	[0039.940] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb50) returned 0x420
	[0039.940] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0039.940] SetLastError (dwErrCode=0x0) 
	[0039.940] VirtualAllocEx (hProcess=0x420, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0040.142] WriteProcessMemory (in: hProcess=0x420, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0042.855] CreateRemoteThread (in: hProcess=0x420, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c
	[0042.940] Sleep (dwMilliseconds=0x12c) 
	[0043.267] SetLastError (dwErrCode=0x0) 
	[0043.267] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xb58) returned 0x428
	[0043.268] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0043.268] SetLastError (dwErrCode=0x0) 
	[0043.268] VirtualAllocEx (hProcess=0x428, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0043.580] WriteProcessMemory (in: hProcess=0x428, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0045.217] CreateRemoteThread (in: hProcess=0x428, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x434
	[0045.223] Sleep (dwMilliseconds=0x12c) 
	[0046.014] SetLastError (dwErrCode=0x0) 
	[0046.014] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xbf4) returned 0x430
	[0046.018] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0046.018] SetLastError (dwErrCode=0x0) 
	[0046.018] VirtualAllocEx (hProcess=0x430, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0046.023] WriteProcessMemory (in: hProcess=0x430, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0047.018] CreateRemoteThread (in: hProcess=0x430, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c
	[0047.018] Sleep (dwMilliseconds=0x12c) 
	[0047.903] SetLastError (dwErrCode=0x0) 
	[0047.903] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xf14) returned 0x438
	[0047.903] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0047.903] SetLastError (dwErrCode=0x0) 
	[0047.903] VirtualAllocEx (hProcess=0x438, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0048.979] WriteProcessMemory (in: hProcess=0x438, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0049.332] CreateRemoteThread (in: hProcess=0x438, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444
	[0049.332] Sleep (dwMilliseconds=0x12c) 
	[0050.096] SetLastError (dwErrCode=0x0) 
	[0050.096] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xfd0) returned 0x440
	[0050.097] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0050.097] SetLastError (dwErrCode=0x0) 
	[0050.097] VirtualAllocEx (hProcess=0x440, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0050.124] WriteProcessMemory (in: hProcess=0x440, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0050.854] CreateRemoteThread (in: hProcess=0x440, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c
	[0050.855] Sleep (dwMilliseconds=0x12c) 
	[0051.526] SetLastError (dwErrCode=0x0) 
	[0051.526] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xff8) returned 0x448
	[0051.526] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0051.526] SetLastError (dwErrCode=0x0) 
	[0051.526] VirtualAllocEx (hProcess=0x448, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0051.528] WriteProcessMemory (in: hProcess=0x448, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0052.234] CreateRemoteThread (in: hProcess=0x448, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x454
	[0052.235] Sleep (dwMilliseconds=0x12c) 
	[0052.826] SetLastError (dwErrCode=0x0) 
	[0052.826] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc14) returned 0x450
	[0052.826] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0052.827] SetLastError (dwErrCode=0x0) 
	[0052.827] VirtualAllocEx (hProcess=0x450, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0052.838] WriteProcessMemory (in: hProcess=0x450, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0053.408] CreateRemoteThread (in: hProcess=0x450, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c
	[0053.408] Sleep (dwMilliseconds=0x12c) 
	[0054.024] SetLastError (dwErrCode=0x0) 
	[0054.024] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4b0) returned 0x458
	[0054.024] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0054.024] SetLastError (dwErrCode=0x0) 
	[0054.024] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0054.024] GetLastError () returned 0x1e7
	[0054.024] CloseHandle (hObject=0x458) returned 1
	[0054.024] Sleep (dwMilliseconds=0x12c) 
	[0054.438] SetLastError (dwErrCode=0x0) 
	[0054.438] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x49c) returned 0x458
	[0054.438] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0054.438] SetLastError (dwErrCode=0x0) 
	[0054.438] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0054.439] GetLastError () returned 0x1e7
	[0054.439] CloseHandle (hObject=0x458) returned 1
	[0054.439] Sleep (dwMilliseconds=0x12c) 
	[0054.830] SetLastError (dwErrCode=0x0) 
	[0054.830] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x47c) returned 0x458
	[0054.830] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0054.830] SetLastError (dwErrCode=0x0) 
	[0054.830] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0054.830] GetLastError () returned 0x1e7
	[0054.830] CloseHandle (hObject=0x458) returned 1
	[0054.830] Sleep (dwMilliseconds=0x12c) 
	[0055.249] SetLastError (dwErrCode=0x0) 
	[0055.249] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x468) returned 0x458
	[0055.249] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0055.249] SetLastError (dwErrCode=0x0) 
	[0055.249] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0055.251] GetLastError () returned 0x1e7
	[0055.251] CloseHandle (hObject=0x458) returned 1
	[0055.251] Sleep (dwMilliseconds=0x12c) 
	[0055.879] SetLastError (dwErrCode=0x0) 
	[0055.879] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x4a0) returned 0x458
	[0055.879] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0055.879] SetLastError (dwErrCode=0x0) 
	[0055.879] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0055.879] GetLastError () returned 0x1e7
	[0055.879] CloseHandle (hObject=0x458) returned 1
	[0055.879] Sleep (dwMilliseconds=0x12c) 
	[0056.327] SetLastError (dwErrCode=0x0) 
	[0056.327] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x770) returned 0x458
	[0056.327] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0056.328] SetLastError (dwErrCode=0x0) 
	[0056.328] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0056.328] GetLastError () returned 0x1e7
	[0056.328] CloseHandle (hObject=0x458) returned 1
	[0056.328] Sleep (dwMilliseconds=0x12c) 
	[0056.846] SetLastError (dwErrCode=0x0) 
	[0056.846] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x9e0) returned 0x458
	[0056.846] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0056.846] SetLastError (dwErrCode=0x0) 
	[0056.846] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0056.846] GetLastError () returned 0x1e7
	[0056.846] CloseHandle (hObject=0x458) returned 1
	[0056.846] Sleep (dwMilliseconds=0x12c) 
	[0057.302] SetLastError (dwErrCode=0x0) 
	[0057.302] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xcf8) returned 0x458
	[0057.302] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0057.302] SetLastError (dwErrCode=0x0) 
	[0057.302] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0057.302] GetLastError () returned 0x1e7
	[0057.302] CloseHandle (hObject=0x458) returned 1
	[0057.302] Sleep (dwMilliseconds=0x12c) 
	[0058.369] SetLastError (dwErrCode=0x0) 
	[0058.369] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd0c) returned 0x458
	[0058.369] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0058.369] SetLastError (dwErrCode=0x0) 
	[0058.369] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0058.370] GetLastError () returned 0x1e7
	[0058.370] CloseHandle (hObject=0x458) returned 1
	[0058.370] Sleep (dwMilliseconds=0x12c) 
	[0058.825] SetLastError (dwErrCode=0x0) 
	[0058.825] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x9b0) returned 0x458
	[0058.825] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0058.825] SetLastError (dwErrCode=0x0) 
	[0058.825] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0058.825] GetLastError () returned 0x1e7
	[0058.825] CloseHandle (hObject=0x458) returned 1
	[0058.826] Sleep (dwMilliseconds=0x12c) 
	[0059.205] SetLastError (dwErrCode=0x0) 
	[0059.205] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xa9c) returned 0x458
	[0059.205] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0059.205] SetLastError (dwErrCode=0x0) 
	[0059.205] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0059.205] GetLastError () returned 0x1e7
	[0059.205] CloseHandle (hObject=0x458) returned 1
	[0059.205] Sleep (dwMilliseconds=0x12c) 
	[0059.576] SetLastError (dwErrCode=0x0) 
	[0059.576] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x784) returned 0x458
	[0059.576] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0059.576] SetLastError (dwErrCode=0x0) 
	[0059.576] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0059.576] GetLastError () returned 0x1e7
	[0059.576] CloseHandle (hObject=0x458) returned 1
	[0059.577] Sleep (dwMilliseconds=0x12c) 
	[0060.056] SetLastError (dwErrCode=0x0) 
	[0060.056] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd44) returned 0x458
	[0060.056] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0060.056] SetLastError (dwErrCode=0x0) 
	[0060.056] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0060.056] GetLastError () returned 0x1e7
	[0060.056] CloseHandle (hObject=0x458) returned 1
	[0060.056] Sleep (dwMilliseconds=0x12c) 
	[0060.543] SetLastError (dwErrCode=0x0) 
	[0060.543] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd2c) returned 0x458
	[0060.544] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0060.544] SetLastError (dwErrCode=0x0) 
	[0060.544] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0060.544] GetLastError () returned 0x1e7
	[0060.544] CloseHandle (hObject=0x458) returned 1
	[0060.544] Sleep (dwMilliseconds=0x12c) 
	[0061.479] SetLastError (dwErrCode=0x0) 
	[0061.479] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xc30) returned 0x458
	[0061.479] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0061.479] SetLastError (dwErrCode=0x0) 
	[0061.479] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0061.479] GetLastError () returned 0x1e7
	[0061.479] CloseHandle (hObject=0x458) returned 1
	[0061.479] Sleep (dwMilliseconds=0x12c) 
	[0061.830] SetLastError (dwErrCode=0x0) 
	[0061.830] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd58) returned 0x458
	[0061.830] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0061.830] SetLastError (dwErrCode=0x0) 
	[0061.830] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0061.830] GetLastError () returned 0x1e7
	[0061.830] CloseHandle (hObject=0x458) returned 1
	[0061.830] Sleep (dwMilliseconds=0x12c) 
	[0062.760] SetLastError (dwErrCode=0x0) 
	[0062.760] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xd70) returned 0x458
	[0062.760] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0062.760] SetLastError (dwErrCode=0x0) 
	[0062.760] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0062.761] GetLastError () returned 0x1e7
	[0062.761] CloseHandle (hObject=0x458) returned 1
	[0062.761] Sleep (dwMilliseconds=0x12c) 
	[0063.188] SetLastError (dwErrCode=0x0) 
	[0063.188] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0xac4) returned 0x458
	[0063.188] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0063.188] SetLastError (dwErrCode=0x0) 
	[0063.188] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0063.188] GetLastError () returned 0x1e7
	[0063.188] CloseHandle (hObject=0x458) returned 1
	[0063.188] Sleep (dwMilliseconds=0x12c) 
	[0063.708] SetLastError (dwErrCode=0x0) 
	[0063.708] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x58) returned 0x458
	[0063.709] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0063.709] SetLastError (dwErrCode=0x0) 
	[0063.709] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x0
	[0063.709] GetLastError () returned 0x1e7
	[0063.709] CloseHandle (hObject=0x458) returned 1
	[0063.709] Sleep (dwMilliseconds=0x12c) 
	[0064.618] SetLastError (dwErrCode=0x0) 
	[0064.618] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x7fc) returned 0x458
	[0064.618] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0064.618] SetLastError (dwErrCode=0x0) 
	[0064.618] VirtualAllocEx (hProcess=0x458, lpAddress=0x7ff7f2c60000, dwSize=0x38e000, flAllocationType=0x3000, flProtect=0x40) returned 0x7ff7f2c60000
	[0064.638] WriteProcessMemory (in: hProcess=0x458, lpBaseAddress=0x7ff7f2c60000, lpBuffer=0x7ff7f2c60000*, nSize=0x38e000, lpNumberOfBytesWritten=0xb1b123dff0 | out: lpBuffer=0x7ff7f2c60000*, lpNumberOfBytesWritten=0xb1b123dff0*=0x38e000) returned 1
	[0065.539] CreateRemoteThread (in: hProcess=0x458, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c61ad0, lpParameter=0x7ff7f2c60000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464
	[0065.540] Sleep (dwMilliseconds=0x12c) 
	[0066.151] SetLastError (dwErrCode=0x0) 
	[0066.151] OpenProcess (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwProcessId=0x1b4) returned 0x0
	[0066.151] Sleep (dwMilliseconds=0x12c) 
	[0066.557] Sleep (dwMilliseconds=0x1388) 
	[0071.621] GetWindowsDirectoryW (in: lpBuffer=0xb1b123df90, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0071.621] SetLastError (dwErrCode=0x0) 
	[0071.621] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.622] GetLastError () returned 0x20
	[0071.622] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0071.622] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xb1b12ff6a0, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\dfylx.exe")) returned 0x21
	[0071.622] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0071.622] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7f2c60000
	[0071.622] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x0, lpMem=0x1b52d40b720 | out: hHeap=0x1b52d3f0000) returned 1
	[0071.622] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x0, lpMem=0x1b52d40fb60 | out: hHeap=0x1b52d3f0000) returned 1
	[0071.623] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x7ff92e3f0000
	[0071.623] GetProcAddress (hModule=0x7ff92e3f0000, lpProcName="GetCurrentPackageId") returned 0x7ff92e3f2b30
	[0071.623] GetCurrentPackageId () returned 0x3d54
	[0071.623] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0xb1b12ff878 | out: phModule=0xb1b12ff878) returned 0
	[0071.623] ExitProcess (uExitCode=0x0) 
	[0071.623] HeapFree (in: hHeap=0x1b52d3f0000, dwFlags=0x0, lpMem=0x1b52d401000 | out: hHeap=0x1b52d3f0000) returned 1

Thread:
	id = 2
	os_tid = 0xdc0


Thread:
	id = 3
	os_tid = 0xd8c


Thread:
	id = 4
	os_tid = 0xf9c


Thread:
	id = 5
	os_tid = 0xf98


Thread:
	id = 6
	os_tid = 0xf90


Thread:
	id = 7
	os_tid = 0xf7c


Thread:
	id = 8
	os_tid = 0xf84


Process:
	id = "2"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x49d1f000"
	os_pid = "0x5f0"
	os_integrity_level = "0x4000"
	os_privileges = "0x260814080"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "64"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000fac7" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 9
	os_tid = 0xdf4


Thread:
	id = 10
	os_tid = 0xa2c


Thread:
	id = 11
	os_tid = 0xa14


Thread:
	id = 12
	os_tid = 0x8dc


Thread:
	id = 13
	os_tid = 0x8d4


Thread:
	id = 14
	os_tid = 0x520


Thread:
	id = 15
	os_tid = 0x67c


Thread:
	id = 16
	os_tid = 0x678


Thread:
	id = 17
	os_tid = 0x644


Thread:
	id = 18
	os_tid = 0x640


Thread:
	id = 19
	os_tid = 0x63c


Thread:
	id = 20
	os_tid = 0x5f4


Process:
	id = "3"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x53ac000"
	os_pid = "0x1b4"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "\"C:\\WINDOWS\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 21
	os_tid = 0x26c

	[0038.751] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff66fc00000
	[0038.752] __set_app_type (_Type=0x1) 
	[0038.752] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff66fc16d00) returned 0x0
	[0038.752] __getmainargs (in: _Argc=0x7ff66fc39200, _Argv=0x7ff66fc39208, _Env=0x7ff66fc39210, _DoWildCard=0, _StartInfo=0x7ff66fc3921c | out: _Argc=0x7ff66fc39200, _Argv=0x7ff66fc39208, _Env=0x7ff66fc39210) returned 0
	[0038.752] _onexit (_Func=0x7ff66fc17fd0) returned 0x7ff66fc17fd0
	[0038.752] _onexit (_Func=0x7ff66fc17fe0) returned 0x7ff66fc17fe0
	[0038.752] _onexit (_Func=0x7ff66fc17ff0) returned 0x7ff66fc17ff0
	[0038.752] _onexit (_Func=0x7ff66fc18000) returned 0x7ff66fc18000
	[0038.752] _onexit (_Func=0x7ff66fc18010) returned 0x7ff66fc18010
	[0038.753] _onexit (_Func=0x7ff66fc18020) returned 0x7ff66fc18020
	[0038.753] GetCurrentThreadId () returned 0x26c
	[0038.753] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x26c) returned 0x7c
	[0038.753] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000
	[0038.753] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetThreadUILanguage") returned 0x7ff92fdea990
	[0038.753] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0038.913] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0038.913] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x7892effd08 | out: phkResult=0x7892effd08*=0x0) returned 0x2
	[0038.913] VirtualQuery (in: lpAddress=0x7892effcf4, lpBuffer=0x7892effc70, dwLength=0x30 | out: lpBuffer=0x7892effc70*(BaseAddress=0x7892eff000, AllocationBase=0x7892e00000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0038.913] VirtualQuery (in: lpAddress=0x7892e00000, lpBuffer=0x7892effc70, dwLength=0x30 | out: lpBuffer=0x7892effc70*(BaseAddress=0x7892e00000, AllocationBase=0x7892e00000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0038.914] VirtualQuery (in: lpAddress=0x7892e01000, lpBuffer=0x7892effc70, dwLength=0x30 | out: lpBuffer=0x7892effc70*(BaseAddress=0x7892e01000, AllocationBase=0x7892e00000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0038.914] VirtualQuery (in: lpAddress=0x7892e04000, lpBuffer=0x7892effc70, dwLength=0x30 | out: lpBuffer=0x7892effc70*(BaseAddress=0x7892e04000, AllocationBase=0x7892e00000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0038.914] VirtualQuery (in: lpAddress=0x7892f00000, lpBuffer=0x7892effc70, dwLength=0x30 | out: lpBuffer=0x7892effc70*(BaseAddress=0x7892f00000, AllocationBase=0x7892f00000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0038.914] GetConsoleOutputCP () returned 0x1b5
	[0038.945] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff66fc3fbb0 | out: lpCPInfo=0x7ff66fc3fbb0) returned 1
	[0038.946] SetConsoleCtrlHandler (HandlerRoutine=0x7ff66fc28150, Add=1) returned 1
	[0038.946] _get_osfhandle (_FileHandle=1) returned 0x50
	[0038.946] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff66fc3fc04 | out: lpMode=0x7ff66fc3fc04) returned 1
	[0038.947] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0038.947] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff66fc3fc00 | out: lpMode=0x7ff66fc3fc00) returned 1
	[0038.948] _get_osfhandle (_FileHandle=1) returned 0x50
	[0038.948] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x0) returned 1
	[0038.948] _get_osfhandle (_FileHandle=1) returned 0x50
	[0038.948] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff66fc3fc08 | out: lpMode=0x7ff66fc3fc08) returned 1
	[0038.949] _get_osfhandle (_FileHandle=1) returned 0x50
	[0038.949] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1
	[0038.950] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0038.950] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff66fc3fc0c | out: lpMode=0x7ff66fc3fc0c) returned 1
	[0038.952] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0038.952] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1
	[0038.953] GetEnvironmentStringsW () returned 0x2140a6f5b70*
	[0038.953] GetProcessHeap () returned 0x2140a6f0000
	[0038.953] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xa7c) returned 0x2140a6f6600
	[0038.953] FreeEnvironmentStringsA (penv="A") returned 1
	[0038.953] GetProcessHeap () returned 0x2140a6f0000
	[0038.953] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x8) returned 0x2140a6f5b70
	[0038.953] GetEnvironmentStringsW () returned 0x2140a6f7090*
	[0038.953] GetProcessHeap () returned 0x2140a6f0000
	[0038.953] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xa7c) returned 0x2140a6f7b20
	[0038.954] FreeEnvironmentStringsA (penv="A") returned 1
	[0038.954] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x7892efebb8 | out: phkResult=0x7892efebb8*=0x88) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x0, lpData=0x7892efebd0*=0x4, lpcbData=0x7892efebb4*=0x1000) returned 0x2
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x1, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x0, lpData=0x7892efebd0*=0x1, lpcbData=0x7892efebb4*=0x1000) returned 0x2
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x0, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x40, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x40, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x0, lpData=0x7892efebd0*=0x40, lpcbData=0x7892efebb4*=0x1000) returned 0x2
	[0038.954] RegCloseKey (hKey=0x88) returned 0x0
	[0038.954] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x7892efebb8 | out: phkResult=0x7892efebb8*=0x88) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x0, lpData=0x7892efebd0*=0x40, lpcbData=0x7892efebb4*=0x1000) returned 0x2
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x1, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x0, lpData=0x7892efebd0*=0x1, lpcbData=0x7892efebb4*=0x1000) returned 0x2
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x0, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x9, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x4, lpData=0x7892efebd0*=0x9, lpcbData=0x7892efebb4*=0x4) returned 0x0
	[0038.954] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0x7892efebb0, lpData=0x7892efebd0, lpcbData=0x7892efebb4*=0x1000 | out: lpType=0x7892efebb0*=0x0, lpData=0x7892efebd0*=0x9, lpcbData=0x7892efebb4*=0x1000) returned 0x2
	[0038.954] RegCloseKey (hKey=0x88) returned 0x0
	[0038.954] time (in: timer=0x0 | out: timer=0x0) returned 0x5cf39961
	[0038.954] srand (_Seed=0x5cf39961) 
	[0038.954] GetCommandLineW () returned="\"C:\\WINDOWS\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f"
	[0038.954] malloc (_Size=0x4000) returned 0x2140a9954f0
	[0038.955] GetCommandLineW () returned="\"C:\\WINDOWS\\System32\\cmd.exe\" /C REG ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f"
	[0038.955] malloc (_Size=0xffce) returned 0x2140a9a0080
	[0038.955] ??_V@YAXPEAX@Z () returned 0x2140a9a0080
	[0038.956] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2140a9a0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0038.956] malloc (_Size=0xffce) returned 0x2140a9b0060
	[0038.956] ??_V@YAXPEAX@Z () returned 0x2140a9b0060
	[0038.956] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2140a9b0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0038.957] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0038.957] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0038.957] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0038.957] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0038.957] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0038.957] GetProcessHeap () returned 0x2140a6f0000
	[0038.957] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f6600) returned 1
	[0038.957] GetEnvironmentStringsW () returned 0x2140a6f9080*
	[0038.957] GetProcessHeap () returned 0x2140a6f0000
	[0038.957] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xa94) returned 0x2140a6f5b90
	[0038.957] FreeEnvironmentStringsA (penv="A") returned 1
	[0038.957] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0038.957] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0038.957] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0038.957] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0038.957] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0038.957] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0038.958] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0038.958] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0038.958] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0038.958] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0038.958] malloc (_Size=0xffce) returned 0x2140a9c0040
	[0038.958] ??_V@YAXPEAX@Z () returned 0x2140a9c0040
	[0038.958] GetProcessHeap () returned 0x2140a6f0000
	[0038.958] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x40) returned 0x2140a6f0fc0
	[0038.958] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2140a9c0040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0038.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x2140a9c0040, lpFilePart=0x7892eff730 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x7892eff730*="Desktop") returned 0x17
	[0038.959] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0038.959] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x7892eff460 | out: lpFindFileData=0x7892eff460*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x2140a6f1010
	[0038.959] FindClose (in: hFindFile=0x2140a6f1010 | out: hFindFile=0x2140a6f1010) returned 1
	[0038.959] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x7892eff460 | out: lpFindFileData=0x7892eff460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x2140a6f1010
	[0038.959] FindClose (in: hFindFile=0x2140a6f1010 | out: hFindFile=0x2140a6f1010) returned 1
	[0038.960] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x7892eff460 | out: lpFindFileData=0x7892eff460*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc15a64b, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0xc15a64b, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x2140a6f1010
	[0038.960] FindClose (in: hFindFile=0x2140a6f1010 | out: hFindFile=0x2140a6f1010) returned 1
	[0038.960] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0038.960] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0038.960] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0038.960] GetProcessHeap () returned 0x2140a6f0000
	[0038.960] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f5b90) returned 1
	[0038.960] GetEnvironmentStringsW () returned 0x2140a6f5b90*
	[0038.960] GetProcessHeap () returned 0x2140a6f0000
	[0038.960] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xacc) returned 0x2140a6f6670
	[0038.960] FreeEnvironmentStringsA (penv="=") returned 1
	[0038.960] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x2140a9a0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0038.960] GetProcessHeap () returned 0x2140a6f0000
	[0038.960] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f0fc0) returned 1
	[0038.960] ??_V@YAXPEAX@Z () returned 0x1
	[0038.960] ??_V@YAXPEAX@Z () returned 0x1
	[0038.960] GetProcessHeap () returned 0x2140a6f0000
	[0038.960] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x4016) returned 0x2140a6f9b60
	[0038.961] GetProcessHeap () returned 0x2140a6f0000
	[0038.961] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x128) returned 0x2140a6f7150
	[0038.961] GetProcessHeap () returned 0x2140a6f0000
	[0038.961] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f9b60) returned 1
	[0038.961] GetConsoleOutputCP () returned 0x1b5
	[0038.997] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff66fc3fbb0 | out: lpCPInfo=0x7ff66fc3fbb0) returned 1
	[0038.997] GetUserDefaultLCID () returned 0x409
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff66fc3bb78, cchData=8 | out: lpLCData=":") returned 2
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x7892effaf0, cchData=128 | out: lpLCData="0") returned 2
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x7892effaf0, cchData=128 | out: lpLCData="0") returned 2
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x7892effaf0, cchData=128 | out: lpLCData="1") returned 2
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff66fc3bb68, cchData=8 | out: lpLCData="/") returned 2
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff66fc3bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff66fc3bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff66fc3ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff66fc3ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff66fc3ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0038.997] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff66fc3b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0038.998] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff66fc3b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0038.998] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff66fc3bb58, cchData=8 | out: lpLCData=".") returned 2
	[0038.998] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff66fc3bb40, cchData=8 | out: lpLCData=",") returned 2
	[0038.998] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0038.998] GetProcessHeap () returned 0x2140a6f0000
	[0038.998] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x0, Size=0x20c) returned 0x2140a6f72f0
	[0038.998] GetConsoleTitleW (in: lpConsoleTitle=0x2140a6f72f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c
	[0039.077] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000
	[0039.077] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileExW") returned 0x7ff92fdee830
	[0039.077] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="IsDebuggerPresent") returned 0x7ff92fdee300
	[0039.078] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff92f1b0a40
	[0039.078] ??_V@YAXPEAX@Z () returned 0x1
	[0039.078] GetProcessHeap () returned 0x2140a6f0000
	[0039.078] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x4012) returned 0x2140a6f9b60
	[0039.079] GetProcessHeap () returned 0x2140a6f0000
	[0039.079] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f9b60) returned 1
	[0039.079] _wcsicmp (_String1="REG", _String2=")") returned 73
	[0039.079] _wcsicmp (_String1="FOR", _String2="REG") returned -12
	[0039.079] _wcsicmp (_String1="FOR/?", _String2="REG") returned -12
	[0039.079] _wcsicmp (_String1="IF", _String2="REG") returned -9
	[0039.079] _wcsicmp (_String1="IF/?", _String2="REG") returned -9
	[0039.079] _wcsicmp (_String1="REM", _String2="REG") returned 6
	[0039.079] _wcsicmp (_String1="REM/?", _String2="REG") returned 6
	[0039.079] GetProcessHeap () returned 0x2140a6f0000
	[0039.079] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xb0) returned 0x2140a6f7510
	[0039.079] GetProcessHeap () returned 0x2140a6f0000
	[0039.079] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x18) returned 0x2140a6f75d0
	[0039.081] GetProcessHeap () returned 0x2140a6f0000
	[0039.081] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x11e) returned 0x2140a6f75f0
	[0039.082] GetConsoleTitleW (in: lpConsoleTitle=0x7892eff9e0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c
	[0039.165] malloc (_Size=0xffce) returned 0x2140a9b0060
	[0039.165] ??_V@YAXPEAX@Z () returned 0x2140a9b0060
	[0039.165] malloc (_Size=0xffce) returned 0x2140a9c0040
	[0039.165] ??_V@YAXPEAX@Z () returned 0x2140a9c0040
	[0039.166] _wcsicmp (_String1="REG", _String2="DIR") returned 14
	[0039.166] _wcsicmp (_String1="REG", _String2="ERASE") returned 13
	[0039.166] _wcsicmp (_String1="REG", _String2="DEL") returned 14
	[0039.166] _wcsicmp (_String1="REG", _String2="TYPE") returned -2
	[0039.166] _wcsicmp (_String1="REG", _String2="COPY") returned 15
	[0039.166] _wcsicmp (_String1="REG", _String2="CD") returned 15
	[0039.166] _wcsicmp (_String1="REG", _String2="CHDIR") returned 15
	[0039.166] _wcsicmp (_String1="REG", _String2="RENAME") returned -7
	[0039.166] _wcsicmp (_String1="REG", _String2="REN") returned -7
	[0039.166] _wcsicmp (_String1="REG", _String2="ECHO") returned 13
	[0039.166] _wcsicmp (_String1="REG", _String2="SET") returned -1
	[0039.166] _wcsicmp (_String1="REG", _String2="PAUSE") returned 2
	[0039.166] _wcsicmp (_String1="REG", _String2="DATE") returned 14
	[0039.166] _wcsicmp (_String1="REG", _String2="TIME") returned -2
	[0039.166] _wcsicmp (_String1="REG", _String2="PROMPT") returned 2
	[0039.166] _wcsicmp (_String1="REG", _String2="MD") returned 5
	[0039.166] _wcsicmp (_String1="REG", _String2="MKDIR") returned 5
	[0039.166] _wcsicmp (_String1="REG", _String2="RD") returned 1
	[0039.166] _wcsicmp (_String1="REG", _String2="RMDIR") returned -8
	[0039.166] _wcsicmp (_String1="REG", _String2="PATH") returned 2
	[0039.166] _wcsicmp (_String1="REG", _String2="GOTO") returned 11
	[0039.166] _wcsicmp (_String1="REG", _String2="SHIFT") returned -1
	[0039.166] _wcsicmp (_String1="REG", _String2="CLS") returned 15
	[0039.166] _wcsicmp (_String1="REG", _String2="CALL") returned 15
	[0039.166] _wcsicmp (_String1="REG", _String2="VERIFY") returned -4
	[0039.166] _wcsicmp (_String1="REG", _String2="VER") returned -4
	[0039.166] _wcsicmp (_String1="REG", _String2="VOL") returned -4
	[0039.166] _wcsicmp (_String1="REG", _String2="EXIT") returned 13
	[0039.166] _wcsicmp (_String1="REG", _String2="SETLOCAL") returned -1
	[0039.166] _wcsicmp (_String1="REG", _String2="ENDLOCAL") returned 13
	[0039.166] _wcsicmp (_String1="REG", _String2="TITLE") returned -2
	[0039.166] _wcsicmp (_String1="REG", _String2="START") returned -1
	[0039.166] _wcsicmp (_String1="REG", _String2="DPATH") returned 14
	[0039.166] _wcsicmp (_String1="REG", _String2="KEYS") returned 7
	[0039.166] _wcsicmp (_String1="REG", _String2="MOVE") returned 5
	[0039.166] _wcsicmp (_String1="REG", _String2="PUSHD") returned 2
	[0039.166] _wcsicmp (_String1="REG", _String2="POPD") returned 2
	[0039.167] _wcsicmp (_String1="REG", _String2="ASSOC") returned 17
	[0039.167] _wcsicmp (_String1="REG", _String2="FTYPE") returned 12
	[0039.167] _wcsicmp (_String1="REG", _String2="BREAK") returned 16
	[0039.167] _wcsicmp (_String1="REG", _String2="COLOR") returned 15
	[0039.167] _wcsicmp (_String1="REG", _String2="MKLINK") returned 5
	[0039.167] _wcsicmp (_String1="REG", _String2="DIR") returned 14
	[0039.167] _wcsicmp (_String1="REG", _String2="ERASE") returned 13
	[0039.167] _wcsicmp (_String1="REG", _String2="DEL") returned 14
	[0039.167] _wcsicmp (_String1="REG", _String2="TYPE") returned -2
	[0039.167] _wcsicmp (_String1="REG", _String2="COPY") returned 15
	[0039.167] _wcsicmp (_String1="REG", _String2="CD") returned 15
	[0039.167] _wcsicmp (_String1="REG", _String2="CHDIR") returned 15
	[0039.167] _wcsicmp (_String1="REG", _String2="RENAME") returned -7
	[0039.167] _wcsicmp (_String1="REG", _String2="REN") returned -7
	[0039.167] _wcsicmp (_String1="REG", _String2="ECHO") returned 13
	[0039.167] _wcsicmp (_String1="REG", _String2="SET") returned -1
	[0039.167] _wcsicmp (_String1="REG", _String2="PAUSE") returned 2
	[0039.167] _wcsicmp (_String1="REG", _String2="DATE") returned 14
	[0039.167] _wcsicmp (_String1="REG", _String2="TIME") returned -2
	[0039.167] _wcsicmp (_String1="REG", _String2="PROMPT") returned 2
	[0039.167] _wcsicmp (_String1="REG", _String2="MD") returned 5
	[0039.167] _wcsicmp (_String1="REG", _String2="MKDIR") returned 5
	[0039.167] _wcsicmp (_String1="REG", _String2="RD") returned 1
	[0039.167] _wcsicmp (_String1="REG", _String2="RMDIR") returned -8
	[0039.167] _wcsicmp (_String1="REG", _String2="PATH") returned 2
	[0039.167] _wcsicmp (_String1="REG", _String2="GOTO") returned 11
	[0039.167] _wcsicmp (_String1="REG", _String2="SHIFT") returned -1
	[0039.167] _wcsicmp (_String1="REG", _String2="CLS") returned 15
	[0039.167] _wcsicmp (_String1="REG", _String2="CALL") returned 15
	[0039.167] _wcsicmp (_String1="REG", _String2="VERIFY") returned -4
	[0039.167] _wcsicmp (_String1="REG", _String2="VER") returned -4
	[0039.167] _wcsicmp (_String1="REG", _String2="VOL") returned -4
	[0039.167] _wcsicmp (_String1="REG", _String2="EXIT") returned 13
	[0039.167] _wcsicmp (_String1="REG", _String2="SETLOCAL") returned -1
	[0039.167] _wcsicmp (_String1="REG", _String2="ENDLOCAL") returned 13
	[0039.167] _wcsicmp (_String1="REG", _String2="TITLE") returned -2
	[0039.167] _wcsicmp (_String1="REG", _String2="START") returned -1
	[0039.167] _wcsicmp (_String1="REG", _String2="DPATH") returned 14
	[0039.167] _wcsicmp (_String1="REG", _String2="KEYS") returned 7
	[0039.167] _wcsicmp (_String1="REG", _String2="MOVE") returned 5
	[0039.167] _wcsicmp (_String1="REG", _String2="PUSHD") returned 2
	[0039.167] _wcsicmp (_String1="REG", _String2="POPD") returned 2
	[0039.167] _wcsicmp (_String1="REG", _String2="ASSOC") returned 17
	[0039.167] _wcsicmp (_String1="REG", _String2="FTYPE") returned 12
	[0039.167] _wcsicmp (_String1="REG", _String2="BREAK") returned 16
	[0039.167] _wcsicmp (_String1="REG", _String2="COLOR") returned 15
	[0039.168] _wcsicmp (_String1="REG", _String2="MKLINK") returned 5
	[0039.168] _wcsicmp (_String1="REG", _String2="FOR") returned 12
	[0039.168] _wcsicmp (_String1="REG", _String2="IF") returned 9
	[0039.168] _wcsicmp (_String1="REG", _String2="REM") returned -6
	[0039.168] ??_V@YAXPEAX@Z () returned 0x1
	[0039.168] GetProcessHeap () returned 0x2140a6f0000
	[0039.168] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xffde) returned 0x2140a6f9b60
	[0039.168] GetProcessHeap () returned 0x2140a6f0000
	[0039.168] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x126) returned 0x2140a6f7720
	[0039.168] _wcsnicmp (_String1="REG", _String2="cmd ", _MaxCount=0x4) returned 15
	[0039.168] malloc (_Size=0xffce) returned 0x2140a9c0040
	[0039.168] ??_V@YAXPEAX@Z () returned 0x2140a9c0040
	[0039.169] GetProcessHeap () returned 0x2140a6f0000
	[0039.169] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x1ffac) returned 0x2140a709b50
	[0039.170] SetErrorMode (uMode=0x0) returned 0x0
	[0039.170] SetErrorMode (uMode=0x1) returned 0x0
	[0039.170] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x2140a709b60, lpFilePart=0x7892eff260 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x7892eff260*="Desktop") returned 0x17
	[0039.170] SetErrorMode (uMode=0x0) returned 0x1
	[0039.170] GetProcessHeap () returned 0x2140a6f0000
	[0039.170] RtlReAllocateHeap (Heap=0x2140a6f0000, Flags=0x0, Ptr=0x2140a709b50, Size=0x48) returned 0x2140a709b50
	[0039.170] GetProcessHeap () returned 0x2140a6f0000
	[0039.170] RtlSizeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, MemoryPointer=0x2140a709b50) returned 0x48
	[0039.170] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0039.171] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0039.171] GetProcessHeap () returned 0x2140a6f0000
	[0039.171] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x1bc) returned 0x2140a6f7850
	[0039.171] GetProcessHeap () returned 0x2140a6f0000
	[0039.171] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x368) returned 0x2140a6f0fc0
	[0039.178] GetProcessHeap () returned 0x2140a6f0000
	[0039.178] RtlReAllocateHeap (Heap=0x2140a6f0000, Flags=0x0, Ptr=0x2140a6f0fc0, Size=0x1be) returned 0x2140a6f0fc0
	[0039.178] GetProcessHeap () returned 0x2140a6f0000
	[0039.178] RtlSizeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, MemoryPointer=0x2140a6f0fc0) returned 0x1be
	[0039.178] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff66fc3bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0039.178] GetProcessHeap () returned 0x2140a6f0000
	[0039.178] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xe8) returned 0x2140a6f7a20
	[0039.179] GetProcessHeap () returned 0x2140a6f0000
	[0039.179] RtlReAllocateHeap (Heap=0x2140a6f0000, Flags=0x0, Ptr=0x2140a6f7a20, Size=0x7e) returned 0x2140a6f7a20
	[0039.179] GetProcessHeap () returned 0x2140a6f0000
	[0039.179] RtlSizeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, MemoryPointer=0x2140a6f7a20) returned 0x7e
	[0039.179] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.179] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\REG.*", fInfoLevelId=0x1, lpFindFileData=0x7892efefd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7892efefd0) returned 0xffffffffffffffff
	[0039.179] GetLastError () returned 0x2
	[0039.179] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.179] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\REG.*", fInfoLevelId=0x1, lpFindFileData=0x7892efefd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7892efefd0) returned 0xffffffffffffffff
	[0039.227] GetLastError () returned 0x2
	[0039.227] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0039.227] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\REG.*", fInfoLevelId=0x1, lpFindFileData=0x7892efefd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7892efefd0) returned 0x2140a6f7ab0
	[0039.227] GetProcessHeap () returned 0x2140a6f0000
	[0039.227] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x0, Size=0x28) returned 0x2140a6f1190
	[0039.227] FindClose (in: hFindFile=0x2140a6f7ab0 | out: hFindFile=0x2140a6f7ab0) returned 1
	[0039.227] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.COM", fInfoLevelId=0x1, lpFindFileData=0x7892efefd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7892efefd0) returned 0xffffffffffffffff
	[0039.228] GetLastError () returned 0x2
	[0039.228] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\reg.EXE", fInfoLevelId=0x1, lpFindFileData=0x7892efefd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x7892efefd0) returned 0x2140a6f7ab0
	[0039.228] GetProcessHeap () returned 0x2140a6f0000
	[0039.228] RtlReAllocateHeap (Heap=0x2140a6f0000, Flags=0x0, Ptr=0x2140a6f1190, Size=0x8) returned 0x2140a6f1190
	[0039.228] FindClose (in: hFindFile=0x2140a6f7ab0 | out: hFindFile=0x2140a6f7ab0) returned 1
	[0039.228] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0039.228] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0039.228] ??_V@YAXPEAX@Z () returned 0x1
	[0039.228] GetConsoleTitleW (in: lpConsoleTitle=0x7892eff550, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c
	[0039.415] InitializeProcThreadAttributeList (in: lpAttributeList=0x7892eff470, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x7892eff360 | out: lpAttributeList=0x7892eff470, lpSize=0x7892eff360) returned 1
	[0039.415] UpdateProcThreadAttribute (in: lpAttributeList=0x7892eff470, dwFlags=0x0, Attribute=0x60001, lpValue=0x7892eff34c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x7892eff470, lpPreviousValue=0x0) returned 1
	[0039.415] GetStartupInfoW (in: lpStartupInfo=0x7892eff400 | out: lpStartupInfo=0x7892eff400*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) 
	[0039.416] GetProcessHeap () returned 0x2140a6f0000
	[0039.416] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x20) returned 0x2140a6f7ab0
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0039.416] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0039.416] GetProcessHeap () returned 0x2140a6f0000
	[0039.416] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f7ab0) returned 1
	[0039.416] GetProcessHeap () returned 0x2140a6f0000
	[0039.416] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0x12) returned 0x2140a6f7ab0
	[0039.417] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1
	[0039.418] _get_osfhandle (_FileHandle=1) returned 0x50
	[0039.418] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1
	[0039.559] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0039.559] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1f7) returned 1
	[0039.684] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\reg.exe", lpCommandLine="REG  ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x7892eff390*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="REG  ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x7892eff368 | out: lpCommandLine="REG  ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f", lpProcessInformation=0x7892eff368*(hProcess=0x9c, hThread=0x98, dwProcessId=0x174, dwThreadId=0xee8)) returned 1
	[0039.848] CloseHandle (hObject=0x98) returned 1
	[0039.848] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0039.848] GetProcessHeap () returned 0x2140a6f0000
	[0039.848] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f6670) returned 1
	[0039.848] GetEnvironmentStringsW () returned 0x2140a6f5b90*
	[0039.848] GetProcessHeap () returned 0x2140a6f0000
	[0039.848] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xacc) returned 0x2140a6f6670
	[0039.848] FreeEnvironmentStringsA (penv="=") returned 1
	[0039.849] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0040.219] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x7892eff2e8 | out: lpExitCode=0x7892eff2e8*=0x0) returned 1
	[0040.219] CloseHandle (hObject=0x9c) returned 1
	[0040.219] _vsnwprintf (in: _Buffer=0x7892eff4b8, _BufferCount=0x13, _Format="%08X", _ArgList=0x7892eff2f8 | out: _Buffer="00000000") returned 8
	[0040.219] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0040.220] GetProcessHeap () returned 0x2140a6f0000
	[0040.220] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f6670) returned 1
	[0040.220] GetEnvironmentStringsW () returned 0x2140a6f85e0*
	[0040.220] GetProcessHeap () returned 0x2140a6f0000
	[0040.220] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xaf2) returned 0x2140a6f5b90
	[0040.220] FreeEnvironmentStringsA (penv="=") returned 1
	[0040.220] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0040.220] GetProcessHeap () returned 0x2140a6f0000
	[0040.220] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f5b90) returned 1
	[0040.220] GetEnvironmentStringsW () returned 0x2140a6f85e0*
	[0040.220] GetProcessHeap () returned 0x2140a6f0000
	[0040.220] RtlAllocateHeap (HeapHandle=0x2140a6f0000, Flags=0x8, Size=0xaf2) returned 0x2140a6f5b90
	[0040.220] FreeEnvironmentStringsA (penv="=") returned 1
	[0040.220] GetProcessHeap () returned 0x2140a6f0000
	[0040.220] RtlFreeHeap (HeapHandle=0x2140a6f0000, Flags=0x0, BaseAddress=0x2140a6f7ab0) returned 1
	[0040.220] DeleteProcThreadAttributeList (in: lpAttributeList=0x7892eff470 | out: lpAttributeList=0x7892eff470) 
	[0040.220] ??_V@YAXPEAX@Z () returned 0x1
	[0040.220] _get_osfhandle (_FileHandle=1) returned 0x50
	[0040.220] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1
	[0040.225] _get_osfhandle (_FileHandle=1) returned 0x50
	[0040.225] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff66fc3fc08 | out: lpMode=0x7ff66fc3fc08) returned 1
	[0040.233] _get_osfhandle (_FileHandle=1) returned 0x50
	[0040.233] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1
	[0040.241] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0040.241] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff66fc3fc0c | out: lpMode=0x7ff66fc3fc0c) returned 1
	[0040.289] _get_osfhandle (_FileHandle=0) returned 0x4c
	[0040.289] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1
	[0040.306] SetConsoleInputExeNameW () returned 0x1
	[0040.306] GetConsoleOutputCP () returned 0x1b5
	[0040.317] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff66fc3fbb0 | out: lpCPInfo=0x7ff66fc3fbb0) returned 1
	[0040.317] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.335] exit (_Code=0) 

Thread:
	id = 43
	os_tid = 0xd84


Process:
	id = "4"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x5774000"
	os_pid = "0x260"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0x1b4"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 22
	os_tid = 0x210


Thread:
	id = 23
	os_tid = 0xe88


Thread:
	id = 24
	os_tid = 0x7a4


Thread:
	id = 25
	os_tid = 0xd54


Thread:
	id = 41
	os_tid = 0xed4


Process:
	id = "5"
	image_name = "sihost.exe"
	filename = "c:\\windows\\system32\\sihost.exe"
	page_root = "0x4ac46000"
	os_pid = "0x6fc"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "sihost.exe"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 26
	os_tid = 0xaf8


Thread:
	id = 27
	os_tid = 0xaf4


Thread:
	id = 28
	os_tid = 0x8d8


Thread:
	id = 29
	os_tid = 0x8a8


Thread:
	id = 30
	os_tid = 0x8a4


Thread:
	id = 31
	os_tid = 0x810


Thread:
	id = 32
	os_tid = 0x4cc


Thread:
	id = 33
	os_tid = 0x750


Thread:
	id = 34
	os_tid = 0x73c


Thread:
	id = 35
	os_tid = 0x728


Thread:
	id = 36
	os_tid = 0x724


Thread:
	id = 37
	os_tid = 0x710


Thread:
	id = 38
	os_tid = 0x70c


Thread:
	id = 39
	os_tid = 0x708


Thread:
	id = 40
	os_tid = 0x700


Thread:
	id = 42
	os_tid = 0xf34

	[0038.840] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0038.840] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="LoadLibraryA") returned 0x7ff92fdee490
	[0038.840] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff9232d0000
	[0038.918] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff931520000
	[0038.918] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff9315e0000
	[0038.918] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff9300e0000
	[0038.928] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff92da00000
	[0038.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLastError") returned 0x7ff92fde33c0
	[0038.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualFree") returned 0x7ff92fdea3e0
	[0038.928] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptExportKey") returned 0x7ff931535410
	[0038.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="DeleteFileW") returned 0x7ff92fdf2130
	[0038.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetDriveTypeW") returned 0x7ff92fdf22c0
	[0038.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCommandLineW") returned 0x7ff92fdedbe0
	[0038.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetStartupInfoW") returned 0x7ff92fdebf50
	[0038.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindNextFileW") returned 0x7ff92fdf2230
	[0038.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualAlloc") returned 0x7ff92fde97f0
	[0038.929] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameA") returned 0x7ff9315622e0
	[0038.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ExitProcess") returned 0x7ff92fdec0d0
	[0038.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff92fe07cd0
	[0038.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessA") returned 0x7ff92fdeb190
	[0038.929] GetProcAddress (hModule=0x7ff92da00000, lpProcName="GetIpNetTable") returned 0x7ff92da0fcc0
	[0038.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetVersionExW") returned 0x7ff92fde9a70
	[0038.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff92fe07cc0
	[0038.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff92fdee860
	[0038.930] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameW") returned 0x7ff9315353c0
	[0038.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ReadFile") returned 0x7ff92fdf2480
	[0038.930] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegQueryValueExA") returned 0x7ff9315354e0
	[0038.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CloseHandle") returned 0x7ff92fdf1ea0
	[0038.930] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegSetValueExW") returned 0x7ff931535370
	[0038.931] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegCloseKey") returned 0x7ff931534c50
	[0038.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileA") returned 0x7ff92fe2a370
	[0038.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesW") returned 0x7ff92fdf24f0
	[0038.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WinExec") returned 0x7ff92fe2e3b0
	[0038.931] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDeriveKey") returned 0x7ff93154a740
	[0038.931] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptGenKey") returned 0x7ff931539be0
	[0038.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Sleep") returned 0x7ff92fde3410
	[0038.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCurrentProcess") returned 0x7ff92fdf1e00
	[0038.932] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteW") returned 0x7ff9301df5d0
	[0038.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSize") returned 0x7ff92fdf2320
	[0038.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GlobalAlloc") returned 0x7ff92fde7fb0
	[0038.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindClose") returned 0x7ff92fdf2160
	[0038.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WaitForMultipleObjects") returned 0x7ff92fdf2070
	[0038.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameA") returned 0x7ff92fdee000
	[0038.932] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteA") returned 0x7ff9302a1600
	[0038.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleHandleA") returned 0x7ff92fdec1a0
	[0038.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameW") returned 0x7ff92fdebfa0
	[0038.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileA") returned 0x7ff92fdf20f0
	[0038.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSizeEx") returned 0x7ff92fdf2330
	[0038.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WriteFile") returned 0x7ff92fdf2570
	[0038.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLogicalDrives") returned 0x7ff92fde8dd0
	[0038.933] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetEnumResourceW") returned 0x7ff9232d12d0
	[0038.933] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExW") returned 0x7ff931534aa0
	[0038.934] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetCloseEnum") returned 0x7ff9232d14f0
	[0038.934] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff92fdee9f0
	[0038.934] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesA") returned 0x7ff92fdf24e0
	[0038.934] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExA") returned 0x7ff9315353b0
	[0038.934] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointer") returned 0x7ff92fdf2510
	[0038.934] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetTickCount") returned 0x7ff92fde33d0
	[0038.934] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesW") returned 0x7ff92fdf2300
	[0038.935] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindFirstFileW") returned 0x7ff92fdf21e0
	[0038.935] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptAcquireContextW") returned 0x7ff931535a10
	[0038.935] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="MoveFileExW") returned 0x7ff92fdeec60
	[0038.935] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetOpenEnumW") returned 0x7ff9232d15e0
	[0038.935] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoInitialize") returned 0x7ff9315e7e20
	[0038.935] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDecrypt") returned 0x7ff931539b10
	[0038.935] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptImportKey") returned 0x7ff9315353f0
	[0038.935] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointerEx") returned 0x7ff92fdf2520
	[0038.936] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileW") returned 0x7ff92fdf2770
	[0038.936] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FreeLibrary") returned 0x7ff92fdebf60
	[0038.936] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessW") returned 0x7ff92fdeba30
	[0038.936] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateDirectoryW") returned 0x7ff92fdf20d0
	[0038.936] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateThread") returned 0x7ff92fde9940
	[0038.936] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDestroyKey") returned 0x7ff9315357e0
	[0038.936] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoCreateInstance") returned 0x7ff92fad5110
	[0038.937] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileW") returned 0x7ff92fdf2100
	[0038.937] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesA") returned 0x7ff92fdf22d0
	[0038.937] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptEncrypt") returned 0x7ff93153a1a0
	[0038.937] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegDeleteValueW") returned 0x7ff9315382d0
	[0038.937] GetVersionExW (in: lpVersionInformation=0xe68cf7faa0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xe68cf7faa0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0038.937] GetWindowsDirectoryW (in: lpBuffer=0xe68cf7fb50, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0038.937] SetLastError (dwErrCode=0x0) 
	[0038.937] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0038.938] GetLastError () returned 0x2
	[0038.938] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0x4e4
	[0038.939] Sleep (dwMilliseconds=0x1388) 
	[0043.962] GetVersionExW (in: lpVersionInformation=0xe68cf7f1b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xe68cf7f1b0*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0043.962] GetWindowsDirectoryW (in: lpBuffer=0x7ff7f2c8bdc0, uSize=0x64 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0043.962] GetWindowsDirectoryW (in: lpBuffer=0x7ff7f2c8ce50, uSize=0x140 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0043.962] CryptAcquireContextW (in: phProv=0x7ff7f2c8ce18, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x10 | out: phProv=0x7ff7f2c8ce18*=0x0) returned 0
	[0044.117] CryptAcquireContextW (in: phProv=0x7ff7f2c8ce18, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x20 | out: phProv=0x7ff7f2c8ce18*=0x0) returned 0
	[0044.119] CryptAcquireContextW (in: phProv=0x7ff7f2c8ce18, szContainer="AES_unique_", szProvider="Microsoft Enhanced RSA and AES Cryptographic Provider", dwProvType=0x18, dwFlags=0x28 | out: phProv=0x7ff7f2c8ce18*=0x274ba59fec0) returned 1
	[0044.127] CryptImportKey (in: hProv=0x274ba59fec0, pbData=0x7ff7f2c893d0, dwDataLen=0x114, hPubKey=0x0, dwFlags=0x1, phKey=0x7ff7f2fe7f68 | out: phKey=0x7ff7f2fe7f68*=0x274ba5c18a0) returned 1
	[0044.127] Sleep (dwMilliseconds=0x3e8) 
	[0045.162] GetLogicalDrives () returned 0x4
	[0045.163] GetDriveTypeW (lpRootPathName="C:") returned 0x3
	[0045.163] FindFirstFileW (in: lpFileName="C:\\*.*", lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x274bd1fbc50
	[0045.163] SetLastError (dwErrCode=0x0) 
	[0045.163] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0045.163] GetLastError () returned 0x5
	[0045.163] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0045.163] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0045.163] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0045.168] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.168] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0045.168] SetLastError (dwErrCode=0x0) 
	[0045.168] CreateFileW (lpFileName="C:\\$GetCurrent\\RyukReadMe.txt" (normalized: "c:\\$getcurrent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774
	[0045.168] GetLastError () returned 0x0
	[0045.168] WriteFile (in: hFile=0x774, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.169] CloseHandle (hObject=0x774) returned 1
	[0045.170] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0045.180] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.181] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0045.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x770
	[0045.181] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.181] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0045.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778
	[0045.182] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.182] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0045.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x77c
	[0045.183] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.183] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0
	[0045.183] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0045.183] SetLastError (dwErrCode=0x0) 
	[0045.183] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\RyukReadMe.txt" (normalized: "c:\\$getcurrent\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774
	[0045.185] GetLastError () returned 0x0
	[0045.185] WriteFile (in: hFile=0x774, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.185] CloseHandle (hObject=0x774) returned 1
	[0045.186] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0045.186] SetLastError (dwErrCode=0x0) 
	[0045.186] CreateFileW (lpFileName="C:\\$GetCurrent\\RyukReadMe.txt" (normalized: "c:\\$getcurrent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774
	[0045.186] GetLastError () returned 0xb7
	[0045.186] CloseHandle (hObject=0x774) returned 1
	[0045.186] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbcb0
	[0045.192] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.192] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0045.192] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0045.192] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0045.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x780
	[0045.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.192] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0045.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x784
	[0045.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.193] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0045.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x788
	[0045.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.194] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0045.194] FindClose (in: hFindFile=0x274bd1fbcb0 | out: hFindFile=0x274bd1fbcb0) returned 1
	[0045.195] SetLastError (dwErrCode=0x0) 
	[0045.195] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\RyukReadMe.txt" (normalized: "c:\\$getcurrent\\safeos\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774
	[0045.196] GetLastError () returned 0x0
	[0045.196] WriteFile (in: hFile=0x774, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.196] CloseHandle (hObject=0x774) returned 1
	[0045.197] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0045.197] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0045.197] SetLastError (dwErrCode=0x0) 
	[0045.197] CreateFileW (lpFileName="C:\\$GetCurrent\\RyukReadMe.txt" (normalized: "c:\\$getcurrent\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x844
	[0045.197] GetLastError () returned 0xb7
	[0045.197] CloseHandle (hObject=0x844) returned 1
	[0045.197] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0045.197] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0045.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x844
	[0045.198] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.198] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0045.198] SetLastError (dwErrCode=0x0) 
	[0045.198] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0045.198] GetLastError () returned 0x5
	[0045.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0045.198] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0045.198] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0045.207] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.208] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1025", cAlternateFileName="")) returned 1
	[0045.208] SetLastError (dwErrCode=0x0) 
	[0045.208] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.236] GetLastError () returned 0x0
	[0045.236] WriteFile (in: hFile=0x78c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.237] CloseHandle (hObject=0x78c) returned 1
	[0045.237] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbcb0
	[0045.240] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.240] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x794
	[0045.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.241] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x798
	[0045.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.242] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.242] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.242] FindClose (in: hFindFile=0x274bd1fbcb0 | out: hFindFile=0x274bd1fbcb0) returned 1
	[0045.242] SetLastError (dwErrCode=0x0) 
	[0045.242] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c
	[0045.243] GetLastError () returned 0x0
	[0045.243] WriteFile (in: hFile=0x79c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.244] CloseHandle (hObject=0x79c) returned 1
	[0045.244] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1028", cAlternateFileName="")) returned 1
	[0045.244] SetLastError (dwErrCode=0x0) 
	[0045.244] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c
	[0045.244] GetLastError () returned 0xb7
	[0045.244] CloseHandle (hObject=0x79c) returned 1
	[0045.244] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0045.245] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.245] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a4
	[0045.246] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.246] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a8
	[0045.246] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.247] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.247] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.247] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0045.247] SetLastError (dwErrCode=0x0) 
	[0045.247] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c
	[0045.249] GetLastError () returned 0x0
	[0045.249] WriteFile (in: hFile=0x79c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.250] CloseHandle (hObject=0x79c) returned 1
	[0045.250] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1029", cAlternateFileName="")) returned 1
	[0045.250] SetLastError (dwErrCode=0x0) 
	[0045.250] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c
	[0045.250] GetLastError () returned 0xb7
	[0045.250] CloseHandle (hObject=0x79c) returned 1
	[0045.251] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0045.252] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.252] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a0
	[0045.253] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.253] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b4
	[0045.254] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.254] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.254] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.254] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0045.255] SetLastError (dwErrCode=0x0) 
	[0045.256] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c
	[0045.257] GetLastError () returned 0x0
	[0045.257] WriteFile (in: hFile=0x79c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.258] CloseHandle (hObject=0x79c) returned 1
	[0045.258] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1030", cAlternateFileName="")) returned 1
	[0045.258] SetLastError (dwErrCode=0x0) 
	[0045.258] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x79c
	[0045.258] GetLastError () returned 0xb7
	[0045.258] CloseHandle (hObject=0x79c) returned 1
	[0045.258] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0045.283] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.283] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x79c
	[0045.283] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.283] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.283] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b0
	[0045.284] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.284] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.284] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.284] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0045.284] SetLastError (dwErrCode=0x0) 
	[0045.284] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.286] GetLastError () returned 0x0
	[0045.286] WriteFile (in: hFile=0x78c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.286] CloseHandle (hObject=0x78c) returned 1
	[0045.286] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1031", cAlternateFileName="")) returned 1
	[0045.286] SetLastError (dwErrCode=0x0) 
	[0045.286] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.287] GetLastError () returned 0xb7
	[0045.287] CloseHandle (hObject=0x78c) returned 1
	[0045.287] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbcb0
	[0045.292] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.292] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.292] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ac
	[0045.293] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.293] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.293] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7bc
	[0045.294] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.294] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.294] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.294] FindClose (in: hFindFile=0x274bd1fbcb0 | out: hFindFile=0x274bd1fbcb0) returned 1
	[0045.294] SetLastError (dwErrCode=0x0) 
	[0045.294] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.296] GetLastError () returned 0x0
	[0045.296] WriteFile (in: hFile=0x78c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.297] CloseHandle (hObject=0x78c) returned 1
	[0045.297] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1032", cAlternateFileName="")) returned 1
	[0045.297] SetLastError (dwErrCode=0x0) 
	[0045.297] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.297] GetLastError () returned 0xb7
	[0045.297] CloseHandle (hObject=0x78c) returned 1
	[0045.297] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0045.298] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.298] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c0
	[0045.298] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.298] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.298] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c4
	[0045.299] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.299] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.299] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.299] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0045.299] SetLastError (dwErrCode=0x0) 
	[0045.299] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0045.829] GetLastError () returned 0x0
	[0045.830] WriteFile (in: hFile=0x7c8, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.831] CloseHandle (hObject=0x7c8) returned 1
	[0045.831] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0045.831] SetLastError (dwErrCode=0x0) 
	[0045.831] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0045.831] GetLastError () returned 0xb7
	[0045.831] CloseHandle (hObject=0x7c8) returned 1
	[0045.831] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0045.858] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.858] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c8
	[0045.858] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.858] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x790
	[0045.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.859] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.859] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.859] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0045.860] SetLastError (dwErrCode=0x0) 
	[0045.860] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8
	[0045.861] GetLastError () returned 0x0
	[0045.861] WriteFile (in: hFile=0x7d8, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.862] CloseHandle (hObject=0x7d8) returned 1
	[0045.862] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1035", cAlternateFileName="")) returned 1
	[0045.862] SetLastError (dwErrCode=0x0) 
	[0045.862] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d8
	[0045.862] GetLastError () returned 0xb7
	[0045.862] CloseHandle (hObject=0x7d8) returned 1
	[0045.862] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0045.862] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.862] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7dc
	[0045.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.863] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e0
	[0045.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.864] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.864] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.864] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0045.864] SetLastError (dwErrCode=0x0) 
	[0045.864] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0
	[0045.887] GetLastError () returned 0x0
	[0045.887] WriteFile (in: hFile=0x7d0, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.887] CloseHandle (hObject=0x7d0) returned 1
	[0045.888] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1036", cAlternateFileName="")) returned 1
	[0045.888] SetLastError (dwErrCode=0x0) 
	[0045.888] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0
	[0045.888] GetLastError () returned 0xb7
	[0045.888] CloseHandle (hObject=0x7d0) returned 1
	[0045.888] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0045.911] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.911] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d0
	[0045.912] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.912] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d8
	[0045.912] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.913] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.913] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.913] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0045.913] SetLastError (dwErrCode=0x0) 
	[0045.913] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d4
	[0045.914] GetLastError () returned 0x0
	[0045.914] WriteFile (in: hFile=0x7d4, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.915] CloseHandle (hObject=0x7d4) returned 1
	[0045.915] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1037", cAlternateFileName="")) returned 1
	[0045.915] SetLastError (dwErrCode=0x0) 
	[0045.915] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d4
	[0045.915] GetLastError () returned 0xb7
	[0045.915] CloseHandle (hObject=0x7d4) returned 1
	[0045.916] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0045.916] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.916] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e4
	[0045.916] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.916] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e8
	[0045.917] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.917] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.917] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.917] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0045.917] SetLastError (dwErrCode=0x0) 
	[0045.917] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.919] GetLastError () returned 0x0
	[0045.919] WriteFile (in: hFile=0x78c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.920] CloseHandle (hObject=0x78c) returned 1
	[0045.920] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1038", cAlternateFileName="")) returned 1
	[0045.920] SetLastError (dwErrCode=0x0) 
	[0045.920] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.920] GetLastError () returned 0xb7
	[0045.920] CloseHandle (hObject=0x78c) returned 1
	[0045.921] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0045.921] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.921] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d4
	[0045.921] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.922] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ec
	[0045.922] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.923] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.923] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.923] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0045.923] SetLastError (dwErrCode=0x0) 
	[0045.923] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.924] GetLastError () returned 0x0
	[0045.924] WriteFile (in: hFile=0x78c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.925] CloseHandle (hObject=0x78c) returned 1
	[0045.925] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1040", cAlternateFileName="")) returned 1
	[0045.925] SetLastError (dwErrCode=0x0) 
	[0045.925] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.926] GetLastError () returned 0xb7
	[0045.926] CloseHandle (hObject=0x78c) returned 1
	[0045.926] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0045.926] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.926] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f0
	[0045.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.927] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f4
	[0045.928] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.928] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.928] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.928] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0045.928] SetLastError (dwErrCode=0x0) 
	[0045.928] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.929] GetLastError () returned 0x0
	[0045.929] WriteFile (in: hFile=0x78c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0045.930] CloseHandle (hObject=0x78c) returned 1
	[0045.930] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1041", cAlternateFileName="")) returned 1
	[0045.930] SetLastError (dwErrCode=0x0) 
	[0045.930] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.931] GetLastError () returned 0xb7
	[0045.931] CloseHandle (hObject=0x78c) returned 1
	[0045.931] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0045.931] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0045.931] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0045.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f8
	[0045.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.932] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0045.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0045.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7fc
	[0045.933] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.933] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0045.933] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0045.933] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0045.933] SetLastError (dwErrCode=0x0) 
	[0045.933] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.371] GetLastError () returned 0x0
	[0046.371] WriteFile (in: hFile=0x808, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.371] CloseHandle (hObject=0x808) returned 1
	[0046.372] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1042", cAlternateFileName="")) returned 1
	[0046.372] SetLastError (dwErrCode=0x0) 
	[0046.372] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.372] GetLastError () returned 0xb7
	[0046.372] CloseHandle (hObject=0x808) returned 1
	[0046.372] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0046.372] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.372] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x814
	[0046.373] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.373] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x810
	[0046.373] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.374] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.374] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.374] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0046.374] SetLastError (dwErrCode=0x0) 
	[0046.374] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.375] GetLastError () returned 0x0
	[0046.375] WriteFile (in: hFile=0x81c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.376] CloseHandle (hObject=0x81c) returned 1
	[0046.376] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1043", cAlternateFileName="")) returned 1
	[0046.376] SetLastError (dwErrCode=0x0) 
	[0046.376] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.376] GetLastError () returned 0xb7
	[0046.376] CloseHandle (hObject=0x81c) returned 1
	[0046.376] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0046.376] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.376] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x818
	[0046.377] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.377] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x820
	[0046.378] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.378] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.378] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.378] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0046.378] SetLastError (dwErrCode=0x0) 
	[0046.378] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.379] GetLastError () returned 0x0
	[0046.379] WriteFile (in: hFile=0x81c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.380] CloseHandle (hObject=0x81c) returned 1
	[0046.380] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1044", cAlternateFileName="")) returned 1
	[0046.380] SetLastError (dwErrCode=0x0) 
	[0046.380] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.380] GetLastError () returned 0xb7
	[0046.380] CloseHandle (hObject=0x81c) returned 1
	[0046.380] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0046.381] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.381] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x78c
	[0046.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.382] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x804
	[0046.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.382] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.382] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.382] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0046.382] SetLastError (dwErrCode=0x0) 
	[0046.382] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.386] GetLastError () returned 0x0
	[0046.386] WriteFile (in: hFile=0x81c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.387] CloseHandle (hObject=0x81c) returned 1
	[0046.387] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1045", cAlternateFileName="")) returned 1
	[0046.387] SetLastError (dwErrCode=0x0) 
	[0046.387] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.387] GetLastError () returned 0xb7
	[0046.387] CloseHandle (hObject=0x81c) returned 1
	[0046.387] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0046.412] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.412] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x81c
	[0046.413] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.413] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x824
	[0046.413] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.414] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.414] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.414] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0046.414] SetLastError (dwErrCode=0x0) 
	[0046.414] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0046.415] GetLastError () returned 0x0
	[0046.415] WriteFile (in: hFile=0x80c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.416] CloseHandle (hObject=0x80c) returned 1
	[0046.416] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1046", cAlternateFileName="")) returned 1
	[0046.416] SetLastError (dwErrCode=0x0) 
	[0046.416] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0046.416] GetLastError () returned 0xb7
	[0046.416] CloseHandle (hObject=0x80c) returned 1
	[0046.416] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0046.417] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.417] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x828
	[0046.417] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.418] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x82c
	[0046.418] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.418] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.418] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.418] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0046.418] SetLastError (dwErrCode=0x0) 
	[0046.418] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0046.420] GetLastError () returned 0x0
	[0046.420] WriteFile (in: hFile=0x80c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.420] CloseHandle (hObject=0x80c) returned 1
	[0046.420] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1049", cAlternateFileName="")) returned 1
	[0046.421] SetLastError (dwErrCode=0x0) 
	[0046.421] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0046.421] GetLastError () returned 0xb7
	[0046.421] CloseHandle (hObject=0x80c) returned 1
	[0046.421] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbcb0
	[0046.421] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.421] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x830
	[0046.421] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.422] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x834
	[0046.422] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.422] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.422] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.422] FindClose (in: hFindFile=0x274bd1fbcb0 | out: hFindFile=0x274bd1fbcb0) returned 1
	[0046.423] SetLastError (dwErrCode=0x0) 
	[0046.423] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.424] GetLastError () returned 0x0
	[0046.424] WriteFile (in: hFile=0x808, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.425] CloseHandle (hObject=0x808) returned 1
	[0046.425] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1053", cAlternateFileName="")) returned 1
	[0046.425] SetLastError (dwErrCode=0x0) 
	[0046.425] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.425] GetLastError () returned 0xb7
	[0046.425] CloseHandle (hObject=0x808) returned 1
	[0046.425] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0046.426] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.426] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x80c
	[0046.426] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.426] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x838
	[0046.427] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.427] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.427] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.427] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0046.427] SetLastError (dwErrCode=0x0) 
	[0046.427] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.429] GetLastError () returned 0x0
	[0046.429] WriteFile (in: hFile=0x808, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0046.430] CloseHandle (hObject=0x808) returned 1
	[0046.430] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1055", cAlternateFileName="")) returned 1
	[0046.430] SetLastError (dwErrCode=0x0) 
	[0046.430] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.430] GetLastError () returned 0xb7
	[0046.430] CloseHandle (hObject=0x808) returned 1
	[0046.430] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0046.431] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0046.431] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0046.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x83c
	[0046.431] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.431] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0046.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0046.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x840
	[0046.432] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.432] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0046.432] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0046.432] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0046.432] SetLastError (dwErrCode=0x0) 
	[0046.432] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0047.024] GetLastError () returned 0x0
	[0047.024] WriteFile (in: hFile=0x86c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.025] CloseHandle (hObject=0x86c) returned 1
	[0047.025] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2052", cAlternateFileName="")) returned 1
	[0047.025] SetLastError (dwErrCode=0x0) 
	[0047.025] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0047.025] GetLastError () returned 0xb7
	[0047.025] CloseHandle (hObject=0x86c) returned 1
	[0047.025] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0047.026] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.026] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0047.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x854
	[0047.026] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.027] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0047.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x85c
	[0047.027] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.027] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0047.027] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0047.027] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0047.027] SetLastError (dwErrCode=0x0) 
	[0047.027] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0047.029] GetLastError () returned 0x0
	[0047.029] WriteFile (in: hFile=0x86c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.030] CloseHandle (hObject=0x86c) returned 1
	[0047.030] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2070", cAlternateFileName="")) returned 1
	[0047.030] SetLastError (dwErrCode=0x0) 
	[0047.030] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0047.030] GetLastError () returned 0xb7
	[0047.030] CloseHandle (hObject=0x86c) returned 1
	[0047.030] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0047.031] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.031] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0047.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x858
	[0047.031] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.031] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0047.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x848
	[0047.032] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.032] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0047.032] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0047.033] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0047.033] SetLastError (dwErrCode=0x0) 
	[0047.033] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0047.056] GetLastError () returned 0x0
	[0047.056] WriteFile (in: hFile=0x860, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.057] CloseHandle (hObject=0x860) returned 1
	[0047.057] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3076", cAlternateFileName="")) returned 1
	[0047.057] SetLastError (dwErrCode=0x0) 
	[0047.057] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0047.057] GetLastError () returned 0xb7
	[0047.057] CloseHandle (hObject=0x860) returned 1
	[0047.058] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0047.058] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.058] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0047.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x86c
	[0047.058] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.058] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0047.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x808
	[0047.059] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.059] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0047.059] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0047.059] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0047.059] SetLastError (dwErrCode=0x0) 
	[0047.059] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0047.061] GetLastError () returned 0x0
	[0047.061] WriteFile (in: hFile=0x870, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.062] CloseHandle (hObject=0x870) returned 1
	[0047.062] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3082", cAlternateFileName="")) returned 1
	[0047.062] SetLastError (dwErrCode=0x0) 
	[0047.062] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0047.062] GetLastError () returned 0xb7
	[0047.062] CloseHandle (hObject=0x870) returned 1
	[0047.062] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0047.062] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.062] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0047.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c
	[0047.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.063] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0047.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x850
	[0047.064] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.064] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0047.064] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0047.064] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0047.064] SetLastError (dwErrCode=0x0) 
	[0047.064] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0047.066] GetLastError () returned 0x0
	[0047.066] WriteFile (in: hFile=0x870, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.066] CloseHandle (hObject=0x870) returned 1
	[0047.067] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Client", cAlternateFileName="")) returned 1
	[0047.067] SetLastError (dwErrCode=0x0) 
	[0047.067] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0047.067] GetLastError () returned 0xb7
	[0047.067] CloseHandle (hObject=0x870) returned 1
	[0047.067] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0047.067] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.067] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0047.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x868
	[0047.068] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.068] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0047.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x874
	[0047.069] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.069] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0047.069] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0047.069] SetLastError (dwErrCode=0x0) 
	[0047.069] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0047.070] GetLastError () returned 0x0
	[0047.070] WriteFile (in: hFile=0x870, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.071] CloseHandle (hObject=0x870) returned 1
	[0047.071] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0047.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x870
	[0047.071] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.072] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0047.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x878
	[0047.072] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.072] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0047.072] SetLastError (dwErrCode=0x0) 
	[0047.072] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x87c
	[0047.072] GetLastError () returned 0xb7
	[0047.072] CloseHandle (hObject=0x87c) returned 1
	[0047.072] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0047.073] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.073] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0047.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x880
	[0047.073] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.073] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0047.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x884
	[0047.074] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.074] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0047.074] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0047.074] SetLastError (dwErrCode=0x0) 
	[0047.074] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x87c
	[0047.074] GetLastError () returned 0x0
	[0047.074] WriteFile (in: hFile=0x87c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.075] CloseHandle (hObject=0x87c) returned 1
	[0047.075] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0047.075] SetLastError (dwErrCode=0x0) 
	[0047.075] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x87c
	[0047.075] GetLastError () returned 0xb7
	[0047.075] CloseHandle (hObject=0x87c) returned 1
	[0047.075] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0047.102] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.102] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0047.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860
	[0047.103] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.103] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0047.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x888
	[0047.104] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.104] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0047.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x88c
	[0047.104] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.105] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0047.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x890
	[0047.105] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.105] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0047.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x894
	[0047.106] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.106] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0047.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x898
	[0047.107] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.107] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0047.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x89c
	[0047.107] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.107] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0047.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a0
	[0047.108] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.108] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0047.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b4
	[0047.812] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.812] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0047.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4
	[0047.813] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.813] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0047.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a8
	[0047.813] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.814] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0047.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c8
	[0047.814] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.814] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0047.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c4
	[0047.815] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.815] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0047.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ac
	[0047.816] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.816] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0047.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc
	[0047.816] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.816] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0047.816] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0047.817] SetLastError (dwErrCode=0x0) 
	[0047.817] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\graphics\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x87c
	[0047.817] GetLastError () returned 0x0
	[0047.817] WriteFile (in: hFile=0x87c, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7e370*=0x324, lpOverlapped=0x0) returned 1
	[0047.818] CloseHandle (hObject=0x87c) returned 1
	[0047.818] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0047.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x87c
	[0047.818] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.818] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0047.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b8
	[0047.819] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.819] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0047.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b0
	[0047.820] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.820] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0047.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0
	[0047.820] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.821] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0047.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8cc
	[0047.821] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.821] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0047.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d0
	[0047.822] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.822] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0047.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d4
	[0047.823] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.823] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0047.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d8
	[0047.826] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.826] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0047.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8dc
	[0047.826] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.827] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0047.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e0
	[0047.827] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.827] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x207fecc8, ftCreationTime.dwHighDateTime=0x1d51927, ftLastAccessTime.dwLowDateTime=0x207fecc8, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0x207fecc8, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RyukReadMe.txt", cAlternateFileName="RYUKRE~1.TXT")) returned 1
	[0047.828] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0047.828] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0047.828] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0047.828] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0047.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e4
	[0047.828] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.828] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0047.828] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0047.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e8
	[0047.829] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.829] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0047.829] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0047.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ec
	[0047.830] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.830] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0047.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f0
	[0047.830] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.831] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0047.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f4
	[0047.831] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.832] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0047.832] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0047.832] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0047.832] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0047.832] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0047.832] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0047.832] SetLastError (dwErrCode=0x0) 
	[0047.832] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RyukReadMe.txt" (normalized: "c:\\588bce7c90097ed212\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x774
	[0047.832] GetLastError () returned 0xb7
	[0047.832] CloseHandle (hObject=0x774) returned 1
	[0047.832] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xc, cFileName="Boot", cAlternateFileName="")) returned 1
	[0047.832] SetLastError (dwErrCode=0x0) 
	[0047.832] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.832] GetLastError () returned 0x5
	[0047.832] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0047.833] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.833] FindFirstFileW (in: lpFileName="C:\\Boot\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbcb0
	[0047.833] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.834] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0047.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f8
	[0047.834] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.835] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0047.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.835] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8fc
	[0047.835] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.835] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0047.835] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x900
	[0047.836] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.836] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0047.836] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.836] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x904
	[0047.837] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.837] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0047.837] SetLastError (dwErrCode=0x0) 
	[0047.837] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.837] GetLastError () returned 0x5
	[0047.837] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.837] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.837] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0047.837] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.837] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.837] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0047.837] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0047.838] SetLastError (dwErrCode=0x0) 
	[0047.838] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\boot\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.838] GetLastError () returned 0x5
	[0047.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.838] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.838] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0047.838] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0047.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0047.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x908
	[0047.838] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.839] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0047.839] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0047.839] SetLastError (dwErrCode=0x0) 
	[0047.839] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.839] GetLastError () returned 0x5
	[0047.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.839] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.839] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0047.839] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.840] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.840] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0047.840] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0047.840] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0047.840] SetLastError (dwErrCode=0x0) 
	[0047.840] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\boot\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.840] GetLastError () returned 0x5
	[0047.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.840] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0047.840] SetLastError (dwErrCode=0x0) 
	[0047.840] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.840] GetLastError () returned 0x5
	[0047.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.840] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0047.841] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.841] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.841] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0047.841] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0047.841] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0047.841] SetLastError (dwErrCode=0x0) 
	[0047.841] CreateFileW (lpFileName="C:\\Boot\\da-DK\\RyukReadMe.txt" (normalized: "c:\\boot\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.841] GetLastError () returned 0x5
	[0047.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.841] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.841] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0047.841] SetLastError (dwErrCode=0x0) 
	[0047.841] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.841] GetLastError () returned 0x5
	[0047.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.841] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.841] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0047.841] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.842] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.842] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0047.842] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0047.842] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0047.842] SetLastError (dwErrCode=0x0) 
	[0047.842] CreateFileW (lpFileName="C:\\Boot\\de-DE\\RyukReadMe.txt" (normalized: "c:\\boot\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.842] GetLastError () returned 0x5
	[0047.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.842] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.842] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0047.842] SetLastError (dwErrCode=0x0) 
	[0047.842] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.842] GetLastError () returned 0x5
	[0047.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.842] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.842] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0047.843] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.843] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.843] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0047.843] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0047.843] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0047.843] SetLastError (dwErrCode=0x0) 
	[0047.843] CreateFileW (lpFileName="C:\\Boot\\el-GR\\RyukReadMe.txt" (normalized: "c:\\boot\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.844] GetLastError () returned 0x5
	[0047.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.844] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0047.844] SetLastError (dwErrCode=0x0) 
	[0047.844] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.844] GetLastError () returned 0x5
	[0047.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.844] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0047.844] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.844] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.844] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0047.845] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0047.845] SetLastError (dwErrCode=0x0) 
	[0047.845] CreateFileW (lpFileName="C:\\Boot\\en-GB\\RyukReadMe.txt" (normalized: "c:\\boot\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.845] GetLastError () returned 0x5
	[0047.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.845] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.845] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0047.845] SetLastError (dwErrCode=0x0) 
	[0047.845] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.845] GetLastError () returned 0x5
	[0047.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.845] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.845] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0047.845] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0047.845] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0047.845] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0047.845] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0047.845] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0047.845] SetLastError (dwErrCode=0x0) 
	[0047.845] CreateFileW (lpFileName="C:\\Boot\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.846] GetLastError () returned 0x5
	[0047.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.846] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.846] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0047.846] SetLastError (dwErrCode=0x0) 
	[0047.846] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0047.846] GetLastError () returned 0x5
	[0047.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0047.846] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0047.846] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0048.877] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.877] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.877] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.877] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.877] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0048.877] SetLastError (dwErrCode=0x0) 
	[0048.877] CreateFileW (lpFileName="C:\\Boot\\es-ES\\RyukReadMe.txt" (normalized: "c:\\boot\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.877] GetLastError () returned 0x5
	[0048.877] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.877] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.877] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0048.877] SetLastError (dwErrCode=0x0) 
	[0048.877] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.877] GetLastError () returned 0x5
	[0048.877] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.877] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.877] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.878] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.878] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.878] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.878] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.878] SetLastError (dwErrCode=0x0) 
	[0048.878] CreateFileW (lpFileName="C:\\Boot\\es-MX\\RyukReadMe.txt" (normalized: "c:\\boot\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.878] GetLastError () returned 0x5
	[0048.878] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.878] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.878] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0048.878] SetLastError (dwErrCode=0x0) 
	[0048.878] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.878] GetLastError () returned 0x5
	[0048.878] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.878] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.878] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.878] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.878] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.879] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.879] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.879] SetLastError (dwErrCode=0x0) 
	[0048.879] CreateFileW (lpFileName="C:\\Boot\\et-EE\\RyukReadMe.txt" (normalized: "c:\\boot\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.879] GetLastError () returned 0x5
	[0048.879] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.879] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.879] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0048.879] SetLastError (dwErrCode=0x0) 
	[0048.879] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.879] GetLastError () returned 0x5
	[0048.879] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.879] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.879] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0048.880] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.880] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.880] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.880] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.880] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0048.880] SetLastError (dwErrCode=0x0) 
	[0048.880] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\boot\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.880] GetLastError () returned 0x5
	[0048.880] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.880] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.880] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0048.880] SetLastError (dwErrCode=0x0) 
	[0048.880] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.880] GetLastError () returned 0x5
	[0048.880] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.880] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.880] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0048.892] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.892] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0048.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938
	[0048.893] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.893] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0048.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x928
	[0048.893] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.893] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0048.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914
	[0048.894] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.894] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0048.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x92c
	[0048.895] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.895] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0048.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910
	[0048.895] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.896] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0048.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x91c
	[0048.896] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.896] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0048.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x930
	[0048.897] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.897] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0048.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c
	[0048.897] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.898] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0048.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x940
	[0048.898] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.898] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0048.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944
	[0048.899] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.899] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0048.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948
	[0048.900] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.900] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0048.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x94c
	[0048.900] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.900] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0048.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x950
	[0048.901] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.901] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0048.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x954
	[0048.902] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.902] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0048.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x958
	[0048.902] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.903] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0048.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0048.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x95c
	[0048.903] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.903] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0048.903] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0048.904] SetLastError (dwErrCode=0x0) 
	[0048.904] CreateFileW (lpFileName="C:\\Boot\\Fonts\\RyukReadMe.txt" (normalized: "c:\\boot\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.905] GetLastError () returned 0x5
	[0048.905] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.905] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.905] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0048.905] SetLastError (dwErrCode=0x0) 
	[0048.905] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.906] GetLastError () returned 0x5
	[0048.906] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.906] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.906] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0048.906] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.906] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.906] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.906] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0048.907] SetLastError (dwErrCode=0x0) 
	[0048.907] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.907] GetLastError () returned 0x5
	[0048.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.907] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0048.907] SetLastError (dwErrCode=0x0) 
	[0048.907] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.907] GetLastError () returned 0x5
	[0048.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.907] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.907] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.907] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.907] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.907] SetLastError (dwErrCode=0x0) 
	[0048.907] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\boot\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.907] GetLastError () returned 0x5
	[0048.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.907] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.907] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0048.908] SetLastError (dwErrCode=0x0) 
	[0048.908] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.908] GetLastError () returned 0x5
	[0048.908] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.908] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.908] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0048.908] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.908] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.908] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0048.909] SetLastError (dwErrCode=0x0) 
	[0048.909] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\boot\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.909] GetLastError () returned 0x5
	[0048.909] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.909] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.909] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0048.909] SetLastError (dwErrCode=0x0) 
	[0048.909] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.909] GetLastError () returned 0x5
	[0048.909] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.909] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.909] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.909] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.909] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.909] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.909] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.909] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.909] SetLastError (dwErrCode=0x0) 
	[0048.909] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\boot\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.909] GetLastError () returned 0x5
	[0048.909] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.909] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.909] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0048.910] SetLastError (dwErrCode=0x0) 
	[0048.910] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.910] GetLastError () returned 0x5
	[0048.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.910] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.910] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0048.910] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.910] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.910] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.910] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.910] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0048.910] SetLastError (dwErrCode=0x0) 
	[0048.910] CreateFileW (lpFileName="C:\\Boot\\it-IT\\RyukReadMe.txt" (normalized: "c:\\boot\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.911] GetLastError () returned 0x5
	[0048.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.911] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.911] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0048.911] SetLastError (dwErrCode=0x0) 
	[0048.911] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.911] GetLastError () returned 0x5
	[0048.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.911] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.911] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.911] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.911] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.911] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.911] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.911] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.911] SetLastError (dwErrCode=0x0) 
	[0048.911] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\boot\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.912] GetLastError () returned 0x5
	[0048.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.912] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.912] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0048.912] SetLastError (dwErrCode=0x0) 
	[0048.912] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.912] GetLastError () returned 0x5
	[0048.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.912] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.912] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.912] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.912] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.912] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.912] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.913] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.913] SetLastError (dwErrCode=0x0) 
	[0048.913] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\boot\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.913] GetLastError () returned 0x5
	[0048.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.913] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.913] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0048.913] SetLastError (dwErrCode=0x0) 
	[0048.913] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.913] GetLastError () returned 0x5
	[0048.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.913] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.913] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.913] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.913] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.913] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.913] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.913] SetLastError (dwErrCode=0x0) 
	[0048.913] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\boot\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.913] GetLastError () returned 0x5
	[0048.913] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.913] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.913] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0048.914] SetLastError (dwErrCode=0x0) 
	[0048.914] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.914] GetLastError () returned 0x5
	[0048.914] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.914] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.914] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0048.914] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.914] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.914] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.914] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0048.914] SetLastError (dwErrCode=0x0) 
	[0048.914] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\boot\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.914] GetLastError () returned 0x5
	[0048.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.915] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.915] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0048.915] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0048.915] SetLastError (dwErrCode=0x0) 
	[0048.915] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.915] GetLastError () returned 0x5
	[0048.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.915] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.915] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0048.915] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.915] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.915] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.915] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.916] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0048.916] SetLastError (dwErrCode=0x0) 
	[0048.916] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\boot\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.916] GetLastError () returned 0x5
	[0048.916] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.916] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.916] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0048.916] SetLastError (dwErrCode=0x0) 
	[0048.916] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.916] GetLastError () returned 0x5
	[0048.916] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.916] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.916] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbfb0
	[0048.916] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.916] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.916] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.916] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.916] FindClose (in: hFindFile=0x274bd1fbfb0 | out: hFindFile=0x274bd1fbfb0) returned 1
	[0048.916] SetLastError (dwErrCode=0x0) 
	[0048.916] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\boot\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.916] GetLastError () returned 0x5
	[0048.916] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.917] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.917] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0048.917] SetLastError (dwErrCode=0x0) 
	[0048.917] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.917] GetLastError () returned 0x5
	[0048.917] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.917] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.917] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0048.917] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.917] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.917] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.917] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.917] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0048.917] SetLastError (dwErrCode=0x0) 
	[0048.918] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\boot\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.918] GetLastError () returned 0x5
	[0048.918] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.918] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.918] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0048.918] SetLastError (dwErrCode=0x0) 
	[0048.918] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.918] GetLastError () returned 0x5
	[0048.918] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.918] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.918] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc070
	[0048.918] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.918] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.918] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.918] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.919] FindClose (in: hFindFile=0x274bd1fc070 | out: hFindFile=0x274bd1fc070) returned 1
	[0048.919] SetLastError (dwErrCode=0x0) 
	[0048.919] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.919] GetLastError () returned 0x5
	[0048.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.919] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.919] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0048.919] SetLastError (dwErrCode=0x0) 
	[0048.919] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.919] GetLastError () returned 0x5
	[0048.919] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.919] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.919] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc070
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.920] FindClose (in: hFindFile=0x274bd1fc070 | out: hFindFile=0x274bd1fc070) returned 1
	[0048.920] SetLastError (dwErrCode=0x0) 
	[0048.920] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\boot\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.920] GetLastError () returned 0x5
	[0048.920] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.920] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0048.920] SetLastError (dwErrCode=0x0) 
	[0048.920] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.920] GetLastError () returned 0x5
	[0048.920] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.920] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.920] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc0d0
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0048.920] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0048.920] FindClose (in: hFindFile=0x274bd1fc0d0 | out: hFindFile=0x274bd1fc0d0) returned 1
	[0048.921] SetLastError (dwErrCode=0x0) 
	[0048.921] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\RyukReadMe.txt" (normalized: "c:\\boot\\qps-ploc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.921] GetLastError () returned 0x5
	[0048.921] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.921] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.921] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0048.921] SetLastError (dwErrCode=0x0) 
	[0048.921] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.921] GetLastError () returned 0x5
	[0048.921] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.921] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.921] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0048.922] SetLastError (dwErrCode=0x0) 
	[0048.922] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.922] GetLastError () returned 0x5
	[0048.922] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0048.922] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.922] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0
	[0048.922] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.922] SetLastError (dwErrCode=0x0) 
	[0048.922] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.922] GetLastError () returned 0x5
	[0048.922] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0048.922] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.922] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0048.922] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0048.922] SetLastError (dwErrCode=0x0) 
	[0048.922] CreateFileW (lpFileName="C:\\Boot\\Resources\\RyukReadMe.txt" (normalized: "c:\\boot\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.923] GetLastError () returned 0x5
	[0048.923] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.923] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.923] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0048.923] SetLastError (dwErrCode=0x0) 
	[0048.923] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.923] GetLastError () returned 0x5
	[0048.923] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.923] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.923] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0048.923] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0048.923] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0048.924] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0048.924] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0048.924] SetLastError (dwErrCode=0x0) 
	[0048.924] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\boot\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.924] GetLastError () returned 0x5
	[0048.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.924] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.924] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0048.924] SetLastError (dwErrCode=0x0) 
	[0048.924] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.924] GetLastError () returned 0x5
	[0048.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0048.924] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0048.924] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0049.106] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.106] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.106] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.106] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.106] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0049.106] SetLastError (dwErrCode=0x0) 
	[0049.106] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\boot\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.106] GetLastError () returned 0x5
	[0049.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.107] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.107] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0049.107] SetLastError (dwErrCode=0x0) 
	[0049.107] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.107] GetLastError () returned 0x5
	[0049.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.107] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.107] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0049.107] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.107] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.107] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0049.107] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0049.107] SetLastError (dwErrCode=0x0) 
	[0049.107] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\boot\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.107] GetLastError () returned 0x5
	[0049.107] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.107] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.107] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0049.107] SetLastError (dwErrCode=0x0) 
	[0049.108] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.108] GetLastError () returned 0x5
	[0049.108] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.108] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.108] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0049.192] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.192] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.193] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0049.193] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0049.193] SetLastError (dwErrCode=0x0) 
	[0049.193] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\boot\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.193] GetLastError () returned 0x5
	[0049.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.193] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.193] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0049.193] SetLastError (dwErrCode=0x0) 
	[0049.193] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.193] GetLastError () returned 0x5
	[0049.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.193] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.193] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0049.193] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.193] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.193] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.193] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.194] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0049.194] SetLastError (dwErrCode=0x0) 
	[0049.194] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.194] GetLastError () returned 0x5
	[0049.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.194] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.194] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0049.194] SetLastError (dwErrCode=0x0) 
	[0049.194] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.194] GetLastError () returned 0x5
	[0049.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.194] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.194] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0049.196] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.196] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.196] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0049.196] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0049.197] SetLastError (dwErrCode=0x0) 
	[0049.197] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\boot\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.197] GetLastError () returned 0x5
	[0049.197] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.197] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.197] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0049.198] SetLastError (dwErrCode=0x0) 
	[0049.198] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.198] GetLastError () returned 0x5
	[0049.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.198] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.198] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0049.198] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.198] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.198] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.198] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.198] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0049.199] SetLastError (dwErrCode=0x0) 
	[0049.199] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\boot\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.199] GetLastError () returned 0x5
	[0049.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.199] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.199] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0049.199] SetLastError (dwErrCode=0x0) 
	[0049.199] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.199] GetLastError () returned 0x5
	[0049.199] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.199] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.199] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0049.200] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.200] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.200] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.200] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.200] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0049.200] SetLastError (dwErrCode=0x0) 
	[0049.200] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\boot\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.200] GetLastError () returned 0x5
	[0049.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.200] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.200] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0049.200] SetLastError (dwErrCode=0x0) 
	[0049.200] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.200] GetLastError () returned 0x5
	[0049.200] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.200] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.200] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0049.201] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.201] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.201] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0049.201] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0049.201] SetLastError (dwErrCode=0x0) 
	[0049.201] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\boot\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.201] GetLastError () returned 0x5
	[0049.201] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.202] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.202] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0049.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x918
	[0049.207] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.207] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0049.207] SetLastError (dwErrCode=0x0) 
	[0049.208] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.208] GetLastError () returned 0x5
	[0049.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.208] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.208] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0049.208] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.209] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0049.209] SetLastError (dwErrCode=0x0) 
	[0049.209] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.209] GetLastError () returned 0x5
	[0049.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.209] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0049.209] SetLastError (dwErrCode=0x0) 
	[0049.209] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.209] GetLastError () returned 0x5
	[0049.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.209] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.209] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.209] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.209] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0049.209] SetLastError (dwErrCode=0x0) 
	[0049.210] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-hk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.210] GetLastError () returned 0x5
	[0049.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.210] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0049.210] SetLastError (dwErrCode=0x0) 
	[0049.210] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.210] GetLastError () returned 0x5
	[0049.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.210] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0049.211] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.211] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0049.211] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0049.211] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0049.211] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0049.211] SetLastError (dwErrCode=0x0) 
	[0049.211] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\boot\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.211] GetLastError () returned 0x5
	[0049.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.211] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.211] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0049.211] FindClose (in: hFindFile=0x274bd1fbcb0 | out: hFindFile=0x274bd1fbcb0) returned 1
	[0049.211] SetLastError (dwErrCode=0x0) 
	[0049.211] CreateFileW (lpFileName="C:\\Boot\\RyukReadMe.txt" (normalized: "c:\\boot\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.212] GetLastError () returned 0x5
	[0049.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.212] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.212] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0xc, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0049.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x774
	[0049.213] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.213] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0xc, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0049.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934
	[0049.213] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.214] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0xc, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0049.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x960
	[0049.214] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.214] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0049.214] SetLastError (dwErrCode=0x0) 
	[0049.214] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.215] GetLastError () returned 0x5
	[0049.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.215] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.215] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ɴ", cAlternateFileName="")) returned 0xffffffffffffffff
	[0049.215] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0
	[0049.216] SetLastError (dwErrCode=0x0) 
	[0049.216] CreateFileW (lpFileName="C:\\Documents and Settings\\RyukReadMe.txt" (normalized: "c:\\documents and settings\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.216] GetLastError () returned 0x5
	[0049.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.216] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.216] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="ESD", cAlternateFileName="")) returned 1
	[0049.216] SetLastError (dwErrCode=0x0) 
	[0049.216] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.216] GetLastError () returned 0x5
	[0049.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.216] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.216] FindFirstFileW (in: lpFileName="C:\\ESD\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0049.225] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.226] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0049.226] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0049.226] SetLastError (dwErrCode=0x0) 
	[0049.226] CreateFileW (lpFileName="C:\\ESD\\RyukReadMe.txt" (normalized: "c:\\esd\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x964
	[0049.226] GetLastError () returned 0x0
	[0049.226] WriteFile (in: hFile=0x964, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7eb30*=0x324, lpOverlapped=0x0) returned 1
	[0049.227] CloseHandle (hObject=0x964) returned 1
	[0049.227] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0049.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x964
	[0049.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.228] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="Logs", cAlternateFileName="")) returned 1
	[0049.228] SetLastError (dwErrCode=0x0) 
	[0049.228] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.228] GetLastError () returned 0x5
	[0049.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.228] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.228] FindFirstFileW (in: lpFileName="C:\\Logs\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0049.560] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.565] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0049.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x968
	[0049.566] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.566] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0049.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x96c
	[0049.576] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.576] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0049.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x970
	[0049.576] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.576] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0049.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x974
	[0049.577] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.577] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0049.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x978
	[0049.578] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0049.578] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0049.579] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1
	[0049.580] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1
	[0049.581] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1
	[0049.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x97c
	[0049.582] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.582] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1
	[0049.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x980
	[0049.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.583] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1
	[0049.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x984
	[0049.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.584] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1
	[0049.584] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0
	[0049.584] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0049.585] SetLastError (dwErrCode=0x0) 
	[0049.585] CreateFileW (lpFileName="C:\\Logs\\RyukReadMe.txt" (normalized: "c:\\logs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x920
	[0049.586] GetLastError () returned 0x0
	[0049.586] WriteFile (in: hFile=0x920, lpBuffer=0x7ff7f2c89500*, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpBuffer=0x7ff7f2c89500*, lpNumberOfBytesWritten=0xe68cf7eb30*=0x324, lpOverlapped=0x0) returned 1
	[0049.587] CloseHandle (hObject=0x920) returned 1
	[0049.587] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0049.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x920
	[0049.588] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.588] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0049.588] SetLastError (dwErrCode=0x0) 
	[0049.588] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.588] GetLastError () returned 0x5
	[0049.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.588] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.588] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ɴ", cAlternateFileName="WI賷æ")) returned 0xffffffffffffffff
	[0049.589] FindClose (in: hFindFile=0xffffffffffffffff | out: hFindFile=0xffffffffffffffff) returned 0
	[0049.589] SetLastError (dwErrCode=0x0) 
	[0049.589] CreateFileW (lpFileName="C:\\PerfLogs\\RyukReadMe.txt" (normalized: "c:\\perflogs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.589] GetLastError () returned 0x5
	[0049.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.589] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.589] FindNextFileW (in: hFindFile=0x274bd1fbc50, lpFindFileData=0xe68cf7eb90 | out: lpFindFileData=0xe68cf7eb90*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb8dc1ac, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0xb8dc1ac, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xc, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0049.589] SetLastError (dwErrCode=0x0) 
	[0049.589] CreateFileW (lpFileName="C:\\RyukReadMe.txt" (normalized: "c:\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.589] GetLastError () returned 0x5
	[0049.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7eb30, lpOverlapped=0x0) returned 0
	[0049.589] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\*.*", lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb8dc1ac, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0xb8dc1ac, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbcb0
	[0049.589] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb8dc1ac, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0xb8dc1ac, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.590] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0049.590] SetLastError (dwErrCode=0x0) 
	[0049.590] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.590] GetLastError () returned 0x5
	[0049.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0049.590] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0049.590] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.590] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0049.590] SetLastError (dwErrCode=0x0) 
	[0049.590] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.590] GetLastError () returned 0x5
	[0049.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0049.590] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0049.590] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.591] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1
	[0049.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x994
	[0049.591] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.592] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0
	[0049.592] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0049.592] SetLastError (dwErrCode=0x0) 
	[0049.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.592] GetLastError () returned 0x5
	[0049.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0049.592] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.592] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1
	[0049.592] SetLastError (dwErrCode=0x0) 
	[0049.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.592] GetLastError () returned 0x5
	[0049.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0049.592] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0049.592] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.592] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1
	[0049.592] SetLastError (dwErrCode=0x0) 
	[0049.592] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.593] GetLastError () returned 0x5
	[0049.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0049.593] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0049.593] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf6c42af, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81028f76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x81028f76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x809e6bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x809e6bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0049.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb979f700, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x27c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ApiClient.dll", cAlternateFileName="APICLI~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bc01200, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xa02d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVCatalog.dll", cAlternateFileName="APPVCA~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a0ce4e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a0ce4e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1f5ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="appvcleaner.exe", cAlternateFileName="APPVCL~1.EXE")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x4b0d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a330a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a330a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x2052d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIntegration.dll", cAlternateFileName="APPVIN~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a59305, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a59305, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x726d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIsvApi.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1b7300, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x60ea0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5e67000, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x73aa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a7f55d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80a7f55d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x336d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIsvStreamingManager.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x1566d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIsvSubsystemController.dll", cAlternateFileName="AP213A~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80aa57b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80aa57b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18d60800, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0x1ae0a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="AP3342~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80acba0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80acba0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbbdc5100, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x22e0a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="AP4400~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x8a8d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIsvVirtualization.dll", cAlternateFileName="AP485B~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80af1c6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80af1c6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x12cad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0xe76d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVOrchestration.dll", cAlternateFileName="APPVOR~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9cf13f00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x13c4d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVPolicy.dll", cAlternateFileName="APPVPO~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b17ebf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b17ebf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x7d0d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVScripting.dll", cAlternateFileName="APPVSC~1.DLL")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9e226c00, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x406d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVShNotify.exe", cAlternateFileName="APPVSH~1.EXE")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14115400, ftLastWriteTime.dwHighDateTime=0x1d0d7a5, nFileSizeHigh=0x0, nFileSizeLow=0xc84c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b3e121, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b3e121, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb4b54300, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x127260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1
	[0049.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8ee04f00, ftLastWriteTime.dwHighDateTime=0x1d0d67f, nFileSizeHigh=0x0, nFileSizeLow=0x1028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RHeartbeatConfig.xml", cAlternateFileName="C2RHEA~1.XML")) returned 1
	[0049.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x99c
	[0049.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.616] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb3841600, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RUI.en-us.dll", cAlternateFileName="C2RUIE~1.DLL")) returned 1
	[0049.616] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0049.616] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd783a00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="i640.hash", cAlternateFileName="I640~1.HAS")) returned 1
	[0049.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a0
	[0049.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbc470d00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="i641033.hash", cAlternateFileName="I64103~1.HAS")) returned 1
	[0049.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a4
	[0049.617] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b64383, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b64383, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa2e72000, ftLastWriteTime.dwHighDateTime=0x1d0b361, nFileSizeHigh=0x0, nFileSizeLow=0x578d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MavInject32.exe", cAlternateFileName="MAVINJ~1.EXE")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b8a5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80b8a5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8745c00, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb0837, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bb0837, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xad6b600, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bfccf1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80bfccf1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mso40uires.dll", cAlternateFileName="MSO40U~1.DLL")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c22f4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c22f4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x10cc9700, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mso40uiwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x808dbb6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x808dbb6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11fdc400, ftLastWriteTime.dwHighDateTime=0x1d0d7aa, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msointl30.en-us.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80c9565a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80c9565a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1909ea00, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c4400, ftLastWriteTime.dwHighDateTime=0x1d098bf, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0049.617] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80cbb8b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80cbb8b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x5b1068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OfficeC2RClient.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1
	[0049.618] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb7179d00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0xf34d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OfficeC2RCom.dll", cAlternateFileName="OFFICE~1.DLL")) returned 1
	[0049.618] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d07d85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d07d85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbd0d7e00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x2a5e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~2.EXE")) returned 1
	[0049.618] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f141b52, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x12ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OfficeUpdateSchedule.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0049.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9a8
	[0049.618] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.618] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3fa7ec8f, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1162, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ServiceWatcherSchedule.xml", cAlternateFileName="SERVIC~1.XML")) returned 1
	[0049.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ac
	[0049.619] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.619] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x101458, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StreamServer.dll", cAlternateFileName="STREAM~1.DLL")) returned 1
	[0049.619] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d542e1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d542e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0049.619] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0049.619] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0049.619] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80d7a486, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x80d7a486, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c5dd00, ftLastWriteTime.dwHighDateTime=0x1d0c58c, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0049.619] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0049.619] SetLastError (dwErrCode=0x0) 
	[0049.619] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.619] GetLastError () returned 0x5
	[0049.619] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0049.620] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.620] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ink", cAlternateFileName="")) returned 1
	[0049.620] SetLastError (dwErrCode=0x0) 
	[0049.620] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.620] GetLastError () returned 0x5
	[0049.620] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0049.620] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.620] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0049.752] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.752] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc137d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Alphabet.xml", cAlternateFileName="")) returned 1
	[0049.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b0
	[0049.752] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.753] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ar-SA", cAlternateFileName="")) returned 1
	[0049.753] SetLastError (dwErrCode=0x0) 
	[0049.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.753] GetLastError () returned 0x5
	[0049.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.753] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.753] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0049.763] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05532b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.763] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.763] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.763] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0049.763] SetLastError (dwErrCode=0x0) 
	[0049.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.763] GetLastError () returned 0x5
	[0049.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.763] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.763] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0049.764] SetLastError (dwErrCode=0x0) 
	[0049.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.764] GetLastError () returned 0x5
	[0049.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.764] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0049.764] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.764] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.764] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.764] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0049.764] SetLastError (dwErrCode=0x0) 
	[0049.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.764] GetLastError () returned 0x5
	[0049.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.764] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.764] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0049.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b4
	[0049.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.765] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0049.765] SetLastError (dwErrCode=0x0) 
	[0049.765] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.765] GetLastError () returned 0x5
	[0049.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.765] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0049.765] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0554b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.765] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.765] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e316e09, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e316e09, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e316e09, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.765] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0049.766] SetLastError (dwErrCode=0x0) 
	[0049.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.766] GetLastError () returned 0x5
	[0049.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.766] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.766] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0049.766] SetLastError (dwErrCode=0x0) 
	[0049.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.766] GetLastError () returned 0x5
	[0049.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.766] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0049.766] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.766] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.766] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.766] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0049.766] SetLastError (dwErrCode=0x0) 
	[0049.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.766] GetLastError () returned 0x5
	[0049.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.767] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.767] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0049.767] SetLastError (dwErrCode=0x0) 
	[0049.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.767] GetLastError () returned 0x5
	[0049.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.767] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0049.769] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.769] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.769] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2f0ba2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2f0ba2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2f0ba2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.769] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0049.770] SetLastError (dwErrCode=0x0) 
	[0049.770] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.770] GetLastError () returned 0x5
	[0049.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.770] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.770] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0049.770] SetLastError (dwErrCode=0x0) 
	[0049.770] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.770] GetLastError () returned 0x5
	[0049.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.770] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0049.770] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.770] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.770] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.770] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0049.770] SetLastError (dwErrCode=0x0) 
	[0049.770] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.770] GetLastError () returned 0x5
	[0049.770] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.771] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.771] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0049.771] SetLastError (dwErrCode=0x0) 
	[0049.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.771] GetLastError () returned 0x5
	[0049.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.771] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0049.771] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.771] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.771] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0049.771] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0049.771] SetLastError (dwErrCode=0x0) 
	[0049.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.771] GetLastError () returned 0x5
	[0049.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.771] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.771] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0049.771] SetLastError (dwErrCode=0x0) 
	[0049.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.771] GetLastError () returned 0x5
	[0049.772] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.772] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0049.783] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0049.783] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a3b058, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a3b058, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1b2d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="boxed-correct.avi", cAlternateFileName="")) returned 1
	[0049.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d8
	[0049.785] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.785] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbf28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="boxed-delete.avi", cAlternateFileName="")) returned 1
	[0049.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9dc
	[0049.785] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.786] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb61e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="boxed-join.avi", cAlternateFileName="")) returned 1
	[0049.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e0
	[0049.786] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.786] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x148de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="boxed-split.avi", cAlternateFileName="")) returned 1
	[0049.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e4
	[0049.787] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.787] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2bfcc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="correct.avi", cAlternateFileName="")) returned 1
	[0049.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e8
	[0049.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.788] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a612b1, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a612b1, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x32e18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="delete.avi", cAlternateFileName="")) returned 1
	[0049.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ec
	[0049.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da3ec5f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7bf3d600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FlickLearningWizard.exe.mui", cAlternateFileName="")) returned 1
	[0049.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InkObj.dll.mui", cAlternateFileName="")) returned 1
	[0049.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InputPersonalization.exe.mui", cAlternateFileName="")) returned 1
	[0049.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d9f27a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IPSEventLogMsg.dll.mui", cAlternateFileName="")) returned 1
	[0049.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IpsMigrationPlugin.dll.mui", cAlternateFileName="")) returned 1
	[0049.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1af9c24, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1af9c24, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x30d3a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="join.avi", cAlternateFileName="")) returned 1
	[0049.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f0
	[0049.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.965] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="micaut.dll.mui", cAlternateFileName="")) returned 1
	[0049.965] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mip.exe.mui", cAlternateFileName="")) returned 1
	[0049.965] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x80b88a00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mshwLatin.dll.mui", cAlternateFileName="")) returned 1
	[0049.965] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dab1374, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="rtscom.dll.mui", cAlternateFileName="")) returned 1
	[0049.965] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da18a06, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7f875d00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ShapeCollector.exe.mui", cAlternateFileName="")) returned 1
	[0049.965] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c6cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="split.avi", cAlternateFileName="")) returned 1
	[0049.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0049.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c0
	[0049.966] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.966] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7e563000, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tabskb.dll.mui", cAlternateFileName="")) returned 1
	[0049.966] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3da8b116, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TabTip.exe.mui", cAlternateFileName="")) returned 1
	[0049.966] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ffe6194, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7c896e00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x6200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TipRes.dll.mui", cAlternateFileName="")) returned 1
	[0049.966] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0049.966] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 1
	[0049.966] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dad75cd, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7dc8925d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x7d250300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TipTsf.dll.mui", cAlternateFileName="")) returned 0
	[0049.966] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0049.967] SetLastError (dwErrCode=0x0) 
	[0049.967] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.968] GetLastError () returned 0x5
	[0049.968] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.969] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.969] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0049.969] SetLastError (dwErrCode=0x0) 
	[0049.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.969] GetLastError () returned 0x5
	[0049.969] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0049.969] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.969] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbe90
	[0050.032] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.032] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.032] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.032] FindClose (in: hFindFile=0x274bd1fbe90 | out: hFindFile=0x274bd1fbe90) returned 1
	[0050.032] SetLastError (dwErrCode=0x0) 
	[0050.032] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-ES\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.033] GetLastError () returned 0x5
	[0050.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.033] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.033] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0050.033] SetLastError (dwErrCode=0x0) 
	[0050.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.033] GetLastError () returned 0x5
	[0050.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.033] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0050.033] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.033] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.033] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2a46df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2a46df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2a46df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.033] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0050.033] SetLastError (dwErrCode=0x0) 
	[0050.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\es-MX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\es-mx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.033] GetLastError () returned 0x5
	[0050.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.033] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.033] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0050.033] SetLastError (dwErrCode=0x0) 
	[0050.033] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.033] GetLastError () returned 0x5
	[0050.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0050.034] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.034] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.034] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.034] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0050.034] SetLastError (dwErrCode=0x0) 
	[0050.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\et-EE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\et-ee\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.034] GetLastError () returned 0x5
	[0050.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.034] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0050.034] SetLastError (dwErrCode=0x0) 
	[0050.034] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.034] GetLastError () returned 0x5
	[0050.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0050.034] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.035] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.035] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.035] FindClose (in: hFindFile=0x274bd1fc010 | out: hFindFile=0x274bd1fc010) returned 1
	[0050.035] SetLastError (dwErrCode=0x0) 
	[0050.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fi-FI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fi-fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.035] GetLastError () returned 0x5
	[0050.035] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.035] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.035] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0050.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c8
	[0050.035] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.036] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd121ea9a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd121ea9a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xc4800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FlickLearningWizard.exe", cAlternateFileName="")) returned 1
	[0050.036] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0050.036] SetLastError (dwErrCode=0x0) 
	[0050.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.036] GetLastError () returned 0x5
	[0050.036] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.036] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0050.036] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0635c03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.037] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.037] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e126ecb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e126ecb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e126ecb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.037] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0050.037] SetLastError (dwErrCode=0x0) 
	[0050.037] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-CA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.037] GetLastError () returned 0x5
	[0050.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.037] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.037] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0050.037] SetLastError (dwErrCode=0x0) 
	[0050.037] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.037] GetLastError () returned 0x5
	[0050.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.037] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0050.037] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.037] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.037] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.037] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0050.037] SetLastError (dwErrCode=0x0) 
	[0050.037] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fr-FR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.038] GetLastError () returned 0x5
	[0050.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.038] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.038] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0050.038] SetLastError (dwErrCode=0x0) 
	[0050.038] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.038] GetLastError () returned 0x5
	[0050.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.038] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0050.039] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.039] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="auxpad", cAlternateFileName="")) returned 1
	[0050.039] SetLastError (dwErrCode=0x0) 
	[0050.039] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.039] GetLastError () returned 0x5
	[0050.039] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.039] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.039] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0050.040] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638633, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.040] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="auxbase.xml", cAlternateFileName="")) returned 1
	[0050.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f8
	[0050.040] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.040] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="auxbase.xml", cAlternateFileName="")) returned 0
	[0050.040] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0050.040] SetLastError (dwErrCode=0x0) 
	[0050.040] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.041] GetLastError () returned 0x5
	[0050.041] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.041] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.041] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0050.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f4
	[0050.041] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.042] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="insert", cAlternateFileName="")) returned 1
	[0050.042] SetLastError (dwErrCode=0x0) 
	[0050.042] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.042] GetLastError () returned 0x5
	[0050.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.042] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.044] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0638c00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.044] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="insertbase.xml", cAlternateFileName="")) returned 1
	[0050.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa00
	[0050.045] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.045] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="insertbase.xml", cAlternateFileName="")) returned 0
	[0050.045] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.045] SetLastError (dwErrCode=0x0) 
	[0050.045] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.045] GetLastError () returned 0x5
	[0050.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.045] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="insert.xml", cAlternateFileName="")) returned 1
	[0050.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9fc
	[0050.046] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.046] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="keypad", cAlternateFileName="")) returned 1
	[0050.046] SetLastError (dwErrCode=0x0) 
	[0050.046] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.046] GetLastError () returned 0x5
	[0050.046] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.046] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.047] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa063932e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.047] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ea.xml", cAlternateFileName="")) returned 1
	[0050.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa08
	[0050.047] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.047] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="keypadbase.xml", cAlternateFileName="")) returned 1
	[0050.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa0c
	[0050.048] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.048] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 1
	[0050.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa10
	[0050.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.049] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kor-kor.xml", cAlternateFileName="")) returned 0
	[0050.049] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.049] SetLastError (dwErrCode=0x0) 
	[0050.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.049] GetLastError () returned 0x5
	[0050.049] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.049] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.049] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0050.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa04
	[0050.050] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.050] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="main", cAlternateFileName="")) returned 1
	[0050.050] SetLastError (dwErrCode=0x0) 
	[0050.050] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.050] GetLastError () returned 0x5
	[0050.050] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.050] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.294] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cd023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.294] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd05, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base.xml", cAlternateFileName="")) returned 1
	[0050.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9c4
	[0050.295] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.295] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="baseAltGr_rtl.xml", cAlternateFileName="")) returned 1
	[0050.295] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9bc
	[0050.295] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.296] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base_altgr.xml", cAlternateFileName="")) returned 1
	[0050.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9cc
	[0050.301] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.301] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base_ca.xml", cAlternateFileName="")) returned 1
	[0050.301] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d0
	[0050.302] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base_heb.xml", cAlternateFileName="")) returned 1
	[0050.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa18
	[0050.303] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.303] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base_jpn.xml", cAlternateFileName="")) returned 1
	[0050.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa1c
	[0050.303] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.303] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base_kor.xml", cAlternateFileName="")) returned 1
	[0050.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa20
	[0050.304] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.304] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="base_rtl.xml", cAlternateFileName="")) returned 1
	[0050.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa24
	[0050.305] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.305] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x40e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja-jp.xml", cAlternateFileName="")) returned 1
	[0050.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa28
	[0050.305] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.306] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3af9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ko-kr.xml", cAlternateFileName="")) returned 1
	[0050.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa2c
	[0050.306] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.306] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-changjei.xml", cAlternateFileName="")) returned 1
	[0050.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa30
	[0050.307] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.307] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b3b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-dayi.xml", cAlternateFileName="")) returned 1
	[0050.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa34
	[0050.308] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.308] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 1
	[0050.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa38
	[0050.308] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.310] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2ac3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-phonetic.xml", cAlternateFileName="")) returned 0
	[0050.310] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.310] SetLastError (dwErrCode=0x0) 
	[0050.310] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.312] GetLastError () returned 0x5
	[0050.312] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.312] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.312] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0050.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa14
	[0050.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.314] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskclearui", cAlternateFileName="OSKCLE~1")) returned 1
	[0050.314] SetLastError (dwErrCode=0x0) 
	[0050.314] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.314] GetLastError () returned 0x5
	[0050.314] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.314] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0050.323] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cdb88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.323] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 1
	[0050.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa40
	[0050.324] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.325] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskclearuibase.xml", cAlternateFileName="")) returned 0
	[0050.325] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0050.325] SetLastError (dwErrCode=0x0) 
	[0050.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.325] GetLastError () returned 0x5
	[0050.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.325] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.325] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1
	[0050.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa3c
	[0050.326] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.326] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskmenu", cAlternateFileName="")) returned 1
	[0050.326] SetLastError (dwErrCode=0x0) 
	[0050.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.326] GetLastError () returned 0x5
	[0050.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.326] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.326] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0050.327] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.327] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 1
	[0050.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa48
	[0050.328] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.328] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskmenubase.xml", cAlternateFileName="")) returned 0
	[0050.328] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0050.328] SetLastError (dwErrCode=0x0) 
	[0050.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.328] GetLastError () returned 0x5
	[0050.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.328] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.328] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0050.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa44
	[0050.329] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.329] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknav", cAlternateFileName="")) returned 1
	[0050.329] SetLastError (dwErrCode=0x0) 
	[0050.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.329] GetLastError () returned 0x5
	[0050.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.329] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0050.330] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ce7a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.330] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 1
	[0050.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa50
	[0050.330] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.330] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknavbase.xml", cAlternateFileName="")) returned 0
	[0050.330] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0050.331] SetLastError (dwErrCode=0x0) 
	[0050.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.331] GetLastError () returned 0x5
	[0050.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.331] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.331] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknav.xml", cAlternateFileName="")) returned 1
	[0050.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa4c
	[0050.331] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.332] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknumpad", cAlternateFileName="OSKNUM~1")) returned 1
	[0050.332] SetLastError (dwErrCode=0x0) 
	[0050.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.332] GetLastError () returned 0x5
	[0050.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.332] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0050.332] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06ceb7f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.332] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 1
	[0050.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa58
	[0050.333] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.333] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x73d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknumpadbase.xml", cAlternateFileName="")) returned 0
	[0050.333] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0050.333] SetLastError (dwErrCode=0x0) 
	[0050.333] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.333] GetLastError () returned 0x5
	[0050.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.333] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.333] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0050.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa54
	[0050.334] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.334] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskpred", cAlternateFileName="")) returned 1
	[0050.334] SetLastError (dwErrCode=0x0) 
	[0050.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.334] GetLastError () returned 0x5
	[0050.334] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.334] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.334] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.334] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cef41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a37a4cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.334] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 1
	[0050.334] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa60
	[0050.335] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.335] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskpredbase.xml", cAlternateFileName="")) returned 0
	[0050.335] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.335] SetLastError (dwErrCode=0x0) 
	[0050.335] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.335] GetLastError () returned 0x5
	[0050.335] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.336] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.336] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0050.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa5c
	[0050.336] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.336] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="symbols", cAlternateFileName="")) returned 1
	[0050.336] SetLastError (dwErrCode=0x0) 
	[0050.336] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.337] GetLastError () returned 0x5
	[0050.337] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.337] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.339] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf371, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.339] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ea-sym.xml", cAlternateFileName="")) returned 1
	[0050.339] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa68
	[0050.339] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.339] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja-jp-sym.xml", cAlternateFileName="")) returned 1
	[0050.340] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa6c
	[0050.340] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.341] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="symbase.xml", cAlternateFileName="")) returned 1
	[0050.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa70
	[0050.341] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.341] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="symbase.xml", cAlternateFileName="")) returned 0
	[0050.342] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.342] SetLastError (dwErrCode=0x0) 
	[0050.342] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.342] GetLastError () returned 0x5
	[0050.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0050.342] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.342] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0050.342] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa64
	[0050.343] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.343] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="symbols.xml", cAlternateFileName="")) returned 0
	[0050.343] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0050.343] SetLastError (dwErrCode=0x0) 
	[0050.343] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.343] GetLastError () returned 0x5
	[0050.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.343] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.343] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0050.343] SetLastError (dwErrCode=0x0) 
	[0050.343] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.343] GetLastError () returned 0x5
	[0050.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.343] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.344] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0050.344] SetLastError (dwErrCode=0x0) 
	[0050.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\he-IL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\he-il\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.344] GetLastError () returned 0x5
	[0050.344] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.344] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0050.344] SetLastError (dwErrCode=0x0) 
	[0050.344] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.344] GetLastError () returned 0x5
	[0050.344] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.344] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.344] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.344] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.345] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0050.345] SetLastError (dwErrCode=0x0) 
	[0050.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hr-HR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hr-hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.345] GetLastError () returned 0x5
	[0050.345] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.345] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.345] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0050.345] SetLastError (dwErrCode=0x0) 
	[0050.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.345] GetLastError () returned 0x5
	[0050.345] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.345] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.345] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.345] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.345] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.345] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.345] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.345] SetLastError (dwErrCode=0x0) 
	[0050.345] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hu-HU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hu-hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.345] GetLastError () returned 0x5
	[0050.346] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.346] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.346] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0050.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9b8
	[0050.346] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.347] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0050.347] SetLastError (dwErrCode=0x0) 
	[0050.347] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.347] GetLastError () returned 0x5
	[0050.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.347] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0050.347] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.347] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6eba2ec1, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xa07693a9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6eba2ec1, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0050.347] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0050.347] SetLastError (dwErrCode=0x0) 
	[0050.347] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\HWRCustomization\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcustomization\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.347] GetLastError () returned 0x5
	[0050.347] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.347] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.347] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0050.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa74
	[0050.348] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.348] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe38781cd, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe38781cd, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10cb30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hwrlatinlm.dat", cAlternateFileName="")) returned 1
	[0050.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa78
	[0050.349] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.349] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb28b2edf, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb28b2edf, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2662f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hwrusalm.dat", cAlternateFileName="")) returned 1
	[0050.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa7c
	[0050.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.350] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cc99ae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb281a570, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb281a570, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x339380, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hwrusash.dat", cAlternateFileName="")) returned 1
	[0050.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa80
	[0050.351] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.351] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x58400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0050.351] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ecc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InkObj.dll", cAlternateFileName="")) returned 1
	[0050.351] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x59a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InputPersonalization.exe", cAlternateFileName="")) returned 1
	[0050.351] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x972, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsar.xml", cAlternateFileName="")) returned 1
	[0050.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa84
	[0050.351] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.352] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipscat.xml", cAlternateFileName="")) returned 1
	[0050.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa88
	[0050.352] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.353] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipschs.xml", cAlternateFileName="")) returned 1
	[0050.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8c
	[0050.353] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.354] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipscht.xml", cAlternateFileName="")) returned 1
	[0050.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa90
	[0050.354] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.355] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipscsy.xml", cAlternateFileName="")) returned 1
	[0050.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9d4
	[0050.780] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.781] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsdan.xml", cAlternateFileName="")) returned 1
	[0050.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa94
	[0050.787] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.788] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsdeu.xml", cAlternateFileName="")) returned 1
	[0050.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa98
	[0050.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.788] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa3a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsel.xml", cAlternateFileName="")) returned 1
	[0050.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa9c
	[0050.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.789] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsen.xml", cAlternateFileName="")) returned 1
	[0050.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa0
	[0050.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.790] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xbd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsesp.xml", cAlternateFileName="")) returned 1
	[0050.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa4
	[0050.790] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.790] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IPSEventLogMsg.dll", cAlternateFileName="")) returned 1
	[0050.790] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsfin.xml", cAlternateFileName="")) returned 1
	[0050.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa8
	[0050.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.791] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsfra.xml", cAlternateFileName="")) returned 1
	[0050.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaac
	[0050.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.792] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipshe.xml", cAlternateFileName="")) returned 1
	[0050.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab0
	[0050.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.792] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipshi.xml", cAlternateFileName="")) returned 1
	[0050.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab4
	[0050.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.793] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipshrv.xml", cAlternateFileName="")) returned 1
	[0050.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8
	[0050.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.794] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d14d081, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d14d081, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsid.xml", cAlternateFileName="")) returned 1
	[0050.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc
	[0050.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.795] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsita.xml", cAlternateFileName="")) returned 1
	[0050.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0
	[0050.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.795] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsjpn.xml", cAlternateFileName="")) returned 1
	[0050.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4
	[0050.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.796] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipskor.xml", cAlternateFileName="")) returned 1
	[0050.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8
	[0050.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.797] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe462e472, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe462e472, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IpsMigrationPlugin.dll", cAlternateFileName="")) returned 1
	[0050.797] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsnld.xml", cAlternateFileName="")) returned 1
	[0050.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc
	[0050.797] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.797] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsnor.xml", cAlternateFileName="")) returned 1
	[0050.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0
	[0050.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.798] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d100bae, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d100bae, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d100bae, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsplk.xml", cAlternateFileName="")) returned 1
	[0050.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4
	[0050.799] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.799] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1ec00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IpsPlugin.dll", cAlternateFileName="")) returned 1
	[0050.799] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsptb.xml", cAlternateFileName="")) returned 1
	[0050.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8
	[0050.799] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.800] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsptg.xml", cAlternateFileName="")) returned 1
	[0050.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc
	[0050.800] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.800] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c96711d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c96711d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c96711d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsrom.xml", cAlternateFileName="")) returned 1
	[0050.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0
	[0050.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.801] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipsrus.xml", cAlternateFileName="")) returned 1
	[0050.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4
	[0050.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.802] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipssrb.xml", cAlternateFileName="")) returned 1
	[0050.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8
	[0050.802] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.802] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipssrl.xml", cAlternateFileName="")) returned 1
	[0050.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec
	[0050.803] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.803] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c940eb6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c940eb6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c940eb6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipssve.xml", cAlternateFileName="")) returned 1
	[0050.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0
	[0050.804] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.804] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7d126e12, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7d126e12, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipstr.xml", cAlternateFileName="")) returned 1
	[0050.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4
	[0050.804] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.804] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0050.805] SetLastError (dwErrCode=0x0) 
	[0050.805] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.805] GetLastError () returned 0x5
	[0050.805] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.805] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.805] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0769b1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.805] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.805] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.806] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.806] SetLastError (dwErrCode=0x0) 
	[0050.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\it-IT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\it-it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.806] GetLastError () returned 0x5
	[0050.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.806] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.806] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0050.806] SetLastError (dwErrCode=0x0) 
	[0050.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.806] GetLastError () returned 0x5
	[0050.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.806] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0050.806] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.806] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.806] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9592f9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e9592f9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e9592f9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.806] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0050.806] SetLastError (dwErrCode=0x0) 
	[0050.806] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ja-JP\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ja-jp\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.807] GetLastError () returned 0x5
	[0050.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.807] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.807] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0050.807] SetLastError (dwErrCode=0x0) 
	[0050.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.807] GetLastError () returned 0x5
	[0050.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.807] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.807] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.807] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.807] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.807] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.807] SetLastError (dwErrCode=0x0) 
	[0050.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ko-KR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ko-kr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.807] GetLastError () returned 0x5
	[0050.807] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.807] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.807] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1
	[0050.807] SetLastError (dwErrCode=0x0) 
	[0050.807] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.808] GetLastError () returned 0x5
	[0050.808] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.808] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.808] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0050.808] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.808] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="chstic.dgml", cAlternateFileName="")) returned 1
	[0050.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0050.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc
	[0050.810] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.810] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="chstic.dgml", cAlternateFileName="")) returned 0
	[0050.810] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0050.810] SetLastError (dwErrCode=0x0) 
	[0050.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.810] GetLastError () returned 0x5
	[0050.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.810] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.810] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0050.810] SetLastError (dwErrCode=0x0) 
	[0050.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.810] GetLastError () returned 0x5
	[0050.810] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.810] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0050.810] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.810] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.811] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.811] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0050.811] SetLastError (dwErrCode=0x0) 
	[0050.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lt-LT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lt-lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.811] GetLastError () returned 0x5
	[0050.811] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.811] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.811] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0050.811] SetLastError (dwErrCode=0x0) 
	[0050.811] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.811] GetLastError () returned 0x5
	[0050.811] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.811] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.812] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.812] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.812] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.812] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.812] SetLastError (dwErrCode=0x0) 
	[0050.812] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\lv-LV\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\lv-lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.812] GetLastError () returned 0x5
	[0050.812] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.813] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc2004e62, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7b000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Ink.dll", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd51e08b5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd51e08b5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x178200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mip.exe", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a1d507, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xde1acd8d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xde1acd8d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x612e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mraut.dll", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mshwgst.dll", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe3805ad4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe3805ad4, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x106a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mshwLatin.dll", cAlternateFileName="")) returned 1
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0050.813] SetLastError (dwErrCode=0x0) 
	[0050.813] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.813] GetLastError () returned 0x5
	[0050.813] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.813] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.813] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076bff5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e90ce26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e90ce26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e90ce26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.814] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.814] SetLastError (dwErrCode=0x0) 
	[0050.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nb-NO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nb-no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.814] GetLastError () returned 0x5
	[0050.814] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.814] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.814] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0050.814] SetLastError (dwErrCode=0x0) 
	[0050.814] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.815] GetLastError () returned 0x5
	[0050.815] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.815] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.815] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0050.816] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.816] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0050.816] SetLastError (dwErrCode=0x0) 
	[0050.816] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\nl-NL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\nl-nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.816] GetLastError () returned 0x5
	[0050.816] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.816] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.816] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0050.817] SetLastError (dwErrCode=0x0) 
	[0050.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.817] GetLastError () returned 0x5
	[0050.817] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.817] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc610
	[0050.817] FindNextFileW (in: hFindFile=0x274bd1fc610, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.817] FindNextFileW (in: hFindFile=0x274bd1fc610, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.817] FindNextFileW (in: hFindFile=0x274bd1fc610, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.817] FindClose (in: hFindFile=0x274bd1fc610 | out: hFindFile=0x274bd1fc610) returned 1
	[0050.821] SetLastError (dwErrCode=0x0) 
	[0050.821] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pl-PL\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pl-pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.821] GetLastError () returned 0x5
	[0050.821] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.821] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.821] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0050.822] SetLastError (dwErrCode=0x0) 
	[0050.822] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.822] GetLastError () returned 0x5
	[0050.822] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.822] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0050.822] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.823] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.823] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.823] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0050.823] SetLastError (dwErrCode=0x0) 
	[0050.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.823] GetLastError () returned 0x5
	[0050.823] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.823] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.823] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0050.823] SetLastError (dwErrCode=0x0) 
	[0050.823] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.823] GetLastError () returned 0x5
	[0050.823] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0050.824] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0050.824] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0050.824] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0050.824] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0050.824] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0050.824] SetLastError (dwErrCode=0x0) 
	[0050.824] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.259] GetLastError () returned 0x5
	[0051.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.259] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.260] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0051.260] SetLastError (dwErrCode=0x0) 
	[0051.260] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.260] GetLastError () returned 0x5
	[0051.260] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.261] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc610
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc610, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc610, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc610, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.262] FindClose (in: hFindFile=0x274bd1fc610 | out: hFindFile=0x274bd1fc610) returned 1
	[0051.262] SetLastError (dwErrCode=0x0) 
	[0051.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ro-RO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ro-ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.262] GetLastError () returned 0x5
	[0051.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.262] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0051.262] SetLastError (dwErrCode=0x0) 
	[0051.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.262] GetLastError () returned 0x5
	[0051.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.262] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.262] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.263] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.263] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0051.263] SetLastError (dwErrCode=0x0) 
	[0051.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ru-RU\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ru-ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.263] GetLastError () returned 0x5
	[0051.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.263] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.263] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0051.263] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0051.263] SetLastError (dwErrCode=0x0) 
	[0051.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.263] GetLastError () returned 0x5
	[0051.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.263] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.263] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.263] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e8a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.263] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.263] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.263] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.263] SetLastError (dwErrCode=0x0) 
	[0051.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sk-SK\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sk-sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.263] GetLastError () returned 0x5
	[0051.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.264] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.264] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0051.264] SetLastError (dwErrCode=0x0) 
	[0051.264] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.264] GetLastError () returned 0x5
	[0051.264] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.264] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0051.264] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.264] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.264] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.264] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0051.264] SetLastError (dwErrCode=0x0) 
	[0051.264] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sl-SI\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sl-si\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.264] GetLastError () returned 0x5
	[0051.264] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.264] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.264] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0051.264] SetLastError (dwErrCode=0x0) 
	[0051.264] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.264] GetLastError () returned 0x5
	[0051.264] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.264] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.265] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.265] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.265] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e933091, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e933091, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e933091, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.265] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.265] SetLastError (dwErrCode=0x0) 
	[0051.265] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sr-Latn-RS\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sr-latn-rs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.266] GetLastError () returned 0x5
	[0051.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.266] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0051.266] SetLastError (dwErrCode=0x0) 
	[0051.266] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.266] GetLastError () returned 0x5
	[0051.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.266] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3af7a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3af7a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3af7a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.266] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.266] SetLastError (dwErrCode=0x0) 
	[0051.266] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\sv-SE\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\sv-se\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.266] GetLastError () returned 0x5
	[0051.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.266] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x779da8e5, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x3e9600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tabskb.dll", cAlternateFileName="")) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1a8750a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1a8750a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x5f780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TabTip.exe", cAlternateFileName="")) returned 1
	[0051.266] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0051.266] SetLastError (dwErrCode=0x0) 
	[0051.266] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.267] GetLastError () returned 0x5
	[0051.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.267] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8602, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.267] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.267] SetLastError (dwErrCode=0x0) 
	[0051.267] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\th-TH\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\th-th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.267] GetLastError () returned 0x5
	[0051.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.267] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e2ca937, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e2ca937, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e2ca937, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79680792, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x79680792, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x79680792, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x101200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipskins.dll", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965a52d, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x7965a52d, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x7965a52d, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x9e1a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tiptsf.dll", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463d4edd, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x6ebfe576, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463d4edd, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x17a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tpcps.dll", cAlternateFileName="")) returned 1
	[0051.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0051.267] SetLastError (dwErrCode=0x0) 
	[0051.267] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.267] GetLastError () returned 0x5
	[0051.267] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.267] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.268] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c896f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.268] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.268] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.268] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.268] SetLastError (dwErrCode=0x0) 
	[0051.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tr-TR\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tr-tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.268] GetLastError () returned 0x5
	[0051.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.268] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.268] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0051.268] SetLastError (dwErrCode=0x0) 
	[0051.268] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.268] GetLastError () returned 0x5
	[0051.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.268] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.269] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.269] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.269] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3632db, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3632db, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3632db, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.269] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.269] SetLastError (dwErrCode=0x0) 
	[0051.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\uk-UA\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\uk-ua\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.270] GetLastError () returned 0x5
	[0051.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.270] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.270] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0051.270] SetLastError (dwErrCode=0x0) 
	[0051.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.270] GetLastError () returned 0x5
	[0051.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.270] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.270] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.270] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.270] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e100c60, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e100c60, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.270] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.270] SetLastError (dwErrCode=0x0) 
	[0051.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.270] GetLastError () returned 0x5
	[0051.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.270] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.270] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0051.270] SetLastError (dwErrCode=0x0) 
	[0051.270] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.270] GetLastError () returned 0x5
	[0051.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.271] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.271] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.271] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 1
	[0051.271] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e0daa01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e0daa01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e100c60, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0051.271] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.271] SetLastError (dwErrCode=0x0) 
	[0051.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.271] GetLastError () returned 0x5
	[0051.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.271] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.271] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0051.271] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0051.271] SetLastError (dwErrCode=0x0) 
	[0051.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.271] GetLastError () returned 0x5
	[0051.271] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.271] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.271] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0051.271] SetLastError (dwErrCode=0x0) 
	[0051.271] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.272] GetLastError () returned 0x5
	[0051.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.272] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.272] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.272] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.272] SetLastError (dwErrCode=0x0) 
	[0051.272] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.272] GetLastError () returned 0x5
	[0051.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.272] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.273] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa098aa4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.273] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 1
	[0051.273] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x73430dfb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x261f2e00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msinfo32.exe.mui", cAlternateFileName="")) returned 0
	[0051.273] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.273] SetLastError (dwErrCode=0x0) 
	[0051.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.273] GetLastError () returned 0x5
	[0051.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.273] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.273] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0051.273] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 0
	[0051.273] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.273] SetLastError (dwErrCode=0x0) 
	[0051.273] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\MSInfo\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\msinfo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.273] GetLastError () returned 0x5
	[0051.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.273] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.274] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0051.274] SetLastError (dwErrCode=0x0) 
	[0051.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.274] GetLastError () returned 0x5
	[0051.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.274] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.274] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.274] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.275] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x58cd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LICLUA.EXE", cAlternateFileName="")) returned 1
	[0051.275] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0051.275] SetLastError (dwErrCode=0x0) 
	[0051.275] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.275] GetLastError () returned 0x5
	[0051.275] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.275] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x168258, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pidgenx.dll", cAlternateFileName="")) returned 1
	[0051.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e1fe00, ftCreationTime.dwHighDateTime=0x1d0d79d, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69e1fe00, ftLastWriteTime.dwHighDateTime=0x1d0d79d, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0051.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00
	[0051.286] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.286] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 1
	[0051.286] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ff8cc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pkeyconfig.companion.dll", cAlternateFileName="PKEYCO~1.DLL")) returned 0
	[0051.286] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.286] SetLastError (dwErrCode=0x0) 
	[0051.287] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.288] GetLastError () returned 0x5
	[0051.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.288] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.288] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0
	[0051.288] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.288] SetLastError (dwErrCode=0x0) 
	[0051.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.288] GetLastError () returned 0x5
	[0051.288] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.288] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.288] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0051.288] SetLastError (dwErrCode=0x0) 
	[0051.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.289] GetLastError () returned 0x5
	[0051.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.289] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.290] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.290] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0051.290] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.290] SetLastError (dwErrCode=0x0) 
	[0051.290] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OfficeSoftwareProtectionPlatform\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\officesoftwareprotectionplatform\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.290] GetLastError () returned 0x5
	[0051.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.290] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.290] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0051.290] SetLastError (dwErrCode=0x0) 
	[0051.290] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.290] GetLastError () returned 0x5
	[0051.290] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.290] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.290] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.292] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.292] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0051.292] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0
	[0051.292] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.292] SetLastError (dwErrCode=0x0) 
	[0051.292] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.292] GetLastError () returned 0x5
	[0051.292] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.292] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.292] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0051.292] SetLastError (dwErrCode=0x0) 
	[0051.292] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.292] GetLastError () returned 0x5
	[0051.293] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.293] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.293] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0051.304] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.304] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Bears.htm", cAlternateFileName="")) returned 1
	[0051.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8
	[0051.305] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.305] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Bears.jpg", cAlternateFileName="")) returned 1
	[0051.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04
	[0051.305] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.306] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a3ecc0a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d2da05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d2da05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0051.306] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Garden.htm", cAlternateFileName="")) returned 1
	[0051.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08
	[0051.306] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.306] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d3f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Garden.jpg", cAlternateFileName="")) returned 1
	[0051.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c
	[0051.307] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.307] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Green Bubbles.htm", cAlternateFileName="")) returned 1
	[0051.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10
	[0051.308] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.308] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1906, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GreenBubbles.jpg", cAlternateFileName="")) returned 1
	[0051.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14
	[0051.308] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.309] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Hand Prints.htm", cAlternateFileName="")) returned 1
	[0051.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18
	[0051.309] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.310] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HandPrints.jpg", cAlternateFileName="")) returned 1
	[0051.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c
	[0051.310] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.310] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Orange Circles.htm", cAlternateFileName="")) returned 1
	[0051.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20
	[0051.311] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.311] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OrangeCircles.jpg", cAlternateFileName="")) returned 1
	[0051.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24
	[0051.312] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.312] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Peacock.htm", cAlternateFileName="")) returned 1
	[0051.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28
	[0051.312] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.312] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Peacock.jpg", cAlternateFileName="")) returned 1
	[0051.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c
	[0051.313] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.313] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Roses.htm", cAlternateFileName="")) returned 1
	[0051.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30
	[0051.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.314] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dccc65, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96dccc65, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96dccc65, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Roses.jpg", cAlternateFileName="")) returned 1
	[0051.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34
	[0051.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.315] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96da6a05, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96da6a05, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Shades of Blue.htm", cAlternateFileName="")) returned 1
	[0051.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38
	[0051.315] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.315] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ShadesOfBlue.jpg", cAlternateFileName="")) returned 1
	[0051.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c
	[0051.316] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.316] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Soft Blue.htm", cAlternateFileName="")) returned 1
	[0051.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40
	[0051.317] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.317] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2949, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SoftBlue.jpg", cAlternateFileName="")) returned 1
	[0051.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44
	[0051.318] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.318] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stars.htm", cAlternateFileName="")) returned 1
	[0051.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48
	[0051.318] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.319] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stars.jpg", cAlternateFileName="")) returned 1
	[0051.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c
	[0051.319] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.319] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d8079e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1d51, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stars.jpg", cAlternateFileName="")) returned 0
	[0051.320] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0051.320] SetLastError (dwErrCode=0x0) 
	[0051.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.322] GetLastError () returned 0x5
	[0051.322] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.322] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.322] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0051.322] SetLastError (dwErrCode=0x0) 
	[0051.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.323] GetLastError () returned 0x5
	[0051.323] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.323] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.323] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.324] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.324] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.324] SetLastError (dwErrCode=0x0) 
	[0051.325] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.325] GetLastError () returned 0x5
	[0051.325] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.325] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.325] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.326] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.326] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0051.326] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.326] SetLastError (dwErrCode=0x0) 
	[0051.326] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.327] GetLastError () returned 0x5
	[0051.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.327] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.327] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0051.327] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.327] SetLastError (dwErrCode=0x0) 
	[0051.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\TextConv\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.327] GetLastError () returned 0x5
	[0051.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.327] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.327] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0051.327] SetLastError (dwErrCode=0x0) 
	[0051.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.328] GetLastError () returned 0x5
	[0051.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.328] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0051.328] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.328] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.328] SetLastError (dwErrCode=0x0) 
	[0051.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.328] GetLastError () returned 0x5
	[0051.328] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.328] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.328] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.329] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.329] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0051.329] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.329] SetLastError (dwErrCode=0x0) 
	[0051.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.329] GetLastError () returned 0x5
	[0051.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.329] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.329] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0051.329] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0051.329] SetLastError (dwErrCode=0x0) 
	[0051.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Triedit\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\triedit\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.329] GetLastError () returned 0x5
	[0051.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.329] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.329] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VC", cAlternateFileName="")) returned 1
	[0051.329] SetLastError (dwErrCode=0x0) 
	[0051.329] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.329] GetLastError () returned 0x5
	[0051.329] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.330] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.330] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.330] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8127e00, ftCreationTime.dwHighDateTime=0x1cbd076, ftLastAccessTime.dwLowDateTime=0xcd0a4098, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd8127e00, ftLastWriteTime.dwHighDateTime=0x1cbd076, nFileSizeHigh=0x0, nFileSizeLow=0xf1b50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0051.330] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdia90.dll", cAlternateFileName="")) returned 1
	[0051.330] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfe87c00, ftCreationTime.dwHighDateTime=0x1cbfe36, ftLastAccessTime.dwLowDateTime=0x2ce22546, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xcfe87c00, ftLastWriteTime.dwHighDateTime=0x1cbfe36, nFileSizeHigh=0x0, nFileSizeLow=0xd0d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdia90.dll", cAlternateFileName="")) returned 0
	[0051.330] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.330] SetLastError (dwErrCode=0x0) 
	[0051.330] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.330] GetLastError () returned 0x5
	[0051.330] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.331] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.331] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VGX", cAlternateFileName="")) returned 1
	[0051.331] SetLastError (dwErrCode=0x0) 
	[0051.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.331] GetLastError () returned 0x5
	[0051.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.331] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.331] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0051.331] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.331] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VGX.dll", cAlternateFileName="")) returned 1
	[0051.331] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a69a2a7, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xb3fd6e56, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a69a2a7, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xf1000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VGX.dll", cAlternateFileName="")) returned 0
	[0051.331] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0051.331] SetLastError (dwErrCode=0x0) 
	[0051.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.331] GetLastError () returned 0x5
	[0051.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.331] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.331] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0051.331] SetLastError (dwErrCode=0x0) 
	[0051.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.332] GetLastError () returned 0x5
	[0051.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.332] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0051.332] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.332] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0051.332] SetLastError (dwErrCode=0x0) 
	[0051.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.333] GetLastError () returned 0x5
	[0051.333] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.333] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.333] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.376] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aebd53e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.376] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0051.376] SetLastError (dwErrCode=0x0) 
	[0051.376] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.376] GetLastError () returned 0x5
	[0051.376] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0051.376] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a6d7a0a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a6fdac8, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6d7a0a, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x30a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOInstallerUI.dll", cAlternateFileName="VSTOIN~1.DLL")) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOLoaderUI.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 0
	[0051.380] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.380] SetLastError (dwErrCode=0x0) 
	[0051.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.380] GetLastError () returned 0x5
	[0051.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0051.380] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x59a70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOLoader.dll", cAlternateFileName="VSTOLO~1.DLL")) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a6fdac8, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0xbee8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTOMessageProvider.dll", cAlternateFileName="VSTOME~1.DLL")) returned 0
	[0051.380] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.380] SetLastError (dwErrCode=0x0) 
	[0051.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.380] GetLastError () returned 0x5
	[0051.380] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.380] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.380] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0051.381] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x4298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vstoee100.tlb", cAlternateFileName="VSTOEE~1.TLB")) returned 1
	[0051.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50
	[0051.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.381] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 1
	[0051.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb54
	[0051.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.382] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vstoee90.tlb", cAlternateFileName="")) returned 0
	[0051.382] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0051.382] SetLastError (dwErrCode=0x0) 
	[0051.382] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.382] GetLastError () returned 0x5
	[0051.382] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.382] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.382] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0051.382] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0051.382] SetLastError (dwErrCode=0x0) 
	[0051.382] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.383] GetLastError () returned 0x5
	[0051.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.383] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.383] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Services", cAlternateFileName="")) returned 1
	[0051.383] SetLastError (dwErrCode=0x0) 
	[0051.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.383] GetLastError () returned 0x5
	[0051.383] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.383] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.383] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.383] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0051.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x998
	[0051.384] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.384] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0051.384] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.384] SetLastError (dwErrCode=0x0) 
	[0051.384] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\services\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.384] GetLastError () returned 0x5
	[0051.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.384] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.384] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="System", cAlternateFileName="")) returned 1
	[0051.384] SetLastError (dwErrCode=0x0) 
	[0051.384] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.384] GetLastError () returned 0x5
	[0051.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.384] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.384] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.386] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.386] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ado", cAlternateFileName="")) returned 1
	[0051.386] SetLastError (dwErrCode=0x0) 
	[0051.386] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.386] GetLastError () returned 0x5
	[0051.386] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.386] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0051.414] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0cb0a3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.414] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52a0c6a1, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x52a0c6a1, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x52a0c6a1, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="adojavas.inc", cAlternateFileName="")) returned 1
	[0051.414] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c
	[0051.415] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.416] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b5b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="adovbs.inc", cAlternateFileName="")) returned 1
	[0051.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60
	[0051.416] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.417] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.417] SetLastError (dwErrCode=0x0) 
	[0051.417] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.417] GetLastError () returned 0x5
	[0051.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.417] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0051.417] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb2730, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.417] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 1
	[0051.417] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9483e2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msader15.dll.mui", cAlternateFileName="")) returned 0
	[0051.417] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0051.417] SetLastError (dwErrCode=0x0) 
	[0051.417] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.418] GetLastError () returned 0x5
	[0051.418] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.418] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.418] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0051.418] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xced4b5c5, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x12d400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado15.dll", cAlternateFileName="")) returned 1
	[0051.418] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado20.tlb", cAlternateFileName="")) returned 1
	[0051.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64
	[0051.418] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.419] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado21.tlb", cAlternateFileName="")) returned 1
	[0051.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68
	[0051.419] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.420] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado25.tlb", cAlternateFileName="")) returned 1
	[0051.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c
	[0051.420] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.421] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado26.tlb", cAlternateFileName="")) returned 1
	[0051.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70
	[0051.421] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.422] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado27.tlb", cAlternateFileName="")) returned 1
	[0051.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74
	[0051.422] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.422] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado28.tlb", cAlternateFileName="")) returned 1
	[0051.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78
	[0051.423] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.424] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c6f28a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4c6f28a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4c6f28a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msado60.tlb", cAlternateFileName="")) returned 1
	[0051.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c
	[0051.424] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.425] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xd005e363, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x58e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadomd.dll", cAlternateFileName="")) returned 1
	[0051.425] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadomd28.tlb", cAlternateFileName="")) returned 1
	[0051.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb80
	[0051.425] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.426] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msador15.dll", cAlternateFileName="")) returned 1
	[0051.426] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x438ed65e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x438ed65e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x438ed65e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msador28.tlb", cAlternateFileName="")) returned 1
	[0051.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84
	[0051.427] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.427] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463fb128, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xc5b43065, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x463fb128, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x62e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadox.dll", cAlternateFileName="")) returned 1
	[0051.427] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c5ad98, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c5ad98, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c5ad98, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadox28.tlb", cAlternateFileName="")) returned 1
	[0051.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88
	[0051.428] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.428] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0051.428] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 0
	[0051.428] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0051.428] SetLastError (dwErrCode=0x0) 
	[0051.428] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ado\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.429] GetLastError () returned 0x5
	[0051.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.429] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.429] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0051.429] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.429] SetLastError (dwErrCode=0x0) 
	[0051.429] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.429] GetLastError () returned 0x5
	[0051.429] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.429] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0051.429] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0cb3579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.429] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 1
	[0051.429] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dd86035, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wab32res.dll.mui", cAlternateFileName="")) returned 0
	[0051.429] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0051.430] SetLastError (dwErrCode=0x0) 
	[0051.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.430] GetLastError () returned 0x5
	[0051.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.430] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.430] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadc", cAlternateFileName="")) returned 1
	[0051.430] SetLastError (dwErrCode=0x0) 
	[0051.430] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.430] GetLastError () returned 0x5
	[0051.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.430] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.430] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0051.497] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.497] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x276, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="adcjavas.inc", cAlternateFileName="")) returned 1
	[0051.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c
	[0051.497] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.498] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="adcvbs.inc", cAlternateFileName="")) returned 1
	[0051.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90
	[0051.499] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.499] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.499] SetLastError (dwErrCode=0x0) 
	[0051.499] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.499] GetLastError () returned 0x5
	[0051.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.499] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d805e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b99489e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadcer.dll.mui", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb2c9ec00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadcor.dll.mui", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msaddsr.dll.mui", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaprsr.dll.mui", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb198bf00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaremr.dll.mui", cAlternateFileName="")) returned 0
	[0051.500] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.500] SetLastError (dwErrCode=0x0) 
	[0051.500] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.500] GetLastError () returned 0x5
	[0051.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.500] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41dce0ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41dce0ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41dce0ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadcer.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3b400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadco.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadcor.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msadds.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msaddsr.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaprsr.dll", cAlternateFileName="")) returned 1
	[0051.500] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d5b9b4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d5b9b4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d5b9b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x57000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaprst.dll", cAlternateFileName="")) returned 1
	[0051.501] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44060e78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x44060e78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x44060e78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdarem.dll", cAlternateFileName="")) returned 1
	[0051.501] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4403ac10, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4403ac10, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4403ac10, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaremr.dll", cAlternateFileName="")) returned 1
	[0051.501] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 1
	[0051.501] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdfmap.dll", cAlternateFileName="")) returned 0
	[0051.501] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0051.501] SetLastError (dwErrCode=0x0) 
	[0051.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\msadc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.501] GetLastError () returned 0x5
	[0051.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.501] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.501] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0051.501] SetLastError (dwErrCode=0x0) 
	[0051.501] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.501] GetLastError () returned 0x5
	[0051.501] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.501] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.501] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0051.504] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.504] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.504] SetLastError (dwErrCode=0x0) 
	[0051.504] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.504] GetLastError () returned 0x5
	[0051.504] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.504] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.504] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0051.505] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d8245b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.505] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdasqlr.dll.mui", cAlternateFileName="")) returned 1
	[0051.505] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b9e0d51, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oledb32r.dll.mui", cAlternateFileName="")) returned 1
	[0051.505] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb38282, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb3fb1900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xac00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqloledb.rll.mui", cAlternateFileName="")) returned 1
	[0051.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.505] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98
	[0051.506] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.506] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 1
	[0051.506] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c
	[0051.507] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.507] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba9f918, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb65d7300, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqlxmlx.rll.mui", cAlternateFileName="")) returned 0
	[0051.507] FindClose (in: hFindFile=0x274bd1fc010 | out: hFindFile=0x274bd1fc010) returned 1
	[0051.507] SetLastError (dwErrCode=0x0) 
	[0051.507] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.508] GetLastError () returned 0x5
	[0051.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.508] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5be00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdaps.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdasql.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdasqlr.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1ca00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msdatl3.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41d0f4ea, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41d0f4ea, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41d0f4ea, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msxactps.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe6000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oledb32.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x13000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oledb32r.dll", cAlternateFileName="")) returned 1
	[0051.508] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41ce9283, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41ce9283, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41ce9283, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x264c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oledbjvs.inc", cAlternateFileName="")) returned 1
	[0051.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94
	[0051.509] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.509] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41cc3017, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41cc3017, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41cc3017, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x26f7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oledbvbs.inc", cAlternateFileName="")) returned 1
	[0051.509] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0
	[0051.510] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.510] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqloledb.dll", cAlternateFileName="")) returned 1
	[0051.510] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c80ffc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43c80ffc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43c80ffc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqloledb.rll", cAlternateFileName="")) returned 1
	[0051.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4
	[0051.511] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.512] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4fa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqlxmlx.dll", cAlternateFileName="")) returned 1
	[0051.512] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 1
	[0051.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8
	[0051.513] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.513] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqlxmlx.rll", cAlternateFileName="")) returned 0
	[0051.513] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0051.513] SetLastError (dwErrCode=0x0) 
	[0051.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.513] GetLastError () returned 0x5
	[0051.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.513] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.513] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0051.514] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wab32res.dll", cAlternateFileName="")) returned 1
	[0051.514] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xeb600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wab32res.dll", cAlternateFileName="")) returned 0
	[0051.514] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.514] SetLastError (dwErrCode=0x0) 
	[0051.514] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.514] GetLastError () returned 0x5
	[0051.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.514] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.514] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="System", cAlternateFileName="")) returned 0
	[0051.514] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0051.514] SetLastError (dwErrCode=0x0) 
	[0051.514] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\RyukReadMe.txt" (normalized: "c:\\program files\\common files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.514] GetLastError () returned 0x5
	[0051.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0051.514] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.515] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0051.515] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0051.515] SetLastError (dwErrCode=0x0) 
	[0051.515] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.515] GetLastError () returned 0x5
	[0051.515] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0051.515] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0051.516] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.516] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0051.516] SetLastError (dwErrCode=0x0) 
	[0051.516] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.516] GetLastError () returned 0x5
	[0051.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.516] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.516] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0d83d92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa21685bc, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.516] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2dfe94, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x68e10600, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hmmapi.dll.mui", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b3c4cb5, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ieinstal.exe.mui", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2212c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="iexplore.exe.mui", cAlternateFileName="")) returned 0
	[0051.517] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.517] SetLastError (dwErrCode=0x0) 
	[0051.517] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\en-US\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.517] GetLastError () returned 0x5
	[0051.517] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.517] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hmmapi.dll", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7d000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="iediagcmd.exe", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a70c9a1, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbc534b5e, ftLastAccessTime.dwHighDateTime=0x1d2fa09, ftLastWriteTime.dwLowDateTime=0x4a70c9a1, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x7a800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ieinstal.exe", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a49fe45, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x36c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ielowutil.exe", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a49fe45, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a49fe45, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4c60b4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IEShims.dll", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa182b3a4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa1c0b0e4, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x8ca44c00, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0xc9340, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="iexplore.exe", cAlternateFileName="")) returned 1
	[0051.517] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="images", cAlternateFileName="")) returned 1
	[0051.518] SetLastError (dwErrCode=0x0) 
	[0051.518] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.518] GetLastError () returned 0x5
	[0051.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.518] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.518] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\images\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0051.518] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d846d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a485593, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.518] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bing.ico", cAlternateFileName="")) returned 1
	[0051.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58
	[0051.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.520] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a55ea4d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a55ea4d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a55ea4d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bing.ico", cAlternateFileName="")) returned 0
	[0051.520] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0051.520] SetLastError (dwErrCode=0x0) 
	[0051.520] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.520] GetLastError () returned 0x5
	[0051.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.520] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.520] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0051.520] SetLastError (dwErrCode=0x0) 
	[0051.520] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.520] GetLastError () returned 0x5
	[0051.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.520] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0051.520] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2132d, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.521] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="install.ins", cAlternateFileName="")) returned 1
	[0051.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac
	[0051.521] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.522] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c952e, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x970b4468, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x970b4468, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="install.ins", cAlternateFileName="")) returned 0
	[0051.522] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0051.522] SetLastError (dwErrCode=0x0) 
	[0051.522] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\signup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.522] GetLastError () returned 0x5
	[0051.522] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.522] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.522] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0051.522] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0051.522] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0051.522] SetLastError (dwErrCode=0x0) 
	[0051.522] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\RyukReadMe.txt" (normalized: "c:\\program files\\internet explorer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.523] GetLastError () returned 0x5
	[0051.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0051.523] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.523] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Java", cAlternateFileName="")) returned 1
	[0051.523] SetLastError (dwErrCode=0x0) 
	[0051.523] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.523] GetLastError () returned 0x5
	[0051.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0051.523] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0051.523] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.523] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1
	[0051.523] SetLastError (dwErrCode=0x0) 
	[0051.523] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.523] GetLastError () returned 0x5
	[0051.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0051.524] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.524] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0051.525] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.525] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bin", cAlternateFileName="")) returned 1
	[0051.525] SetLastError (dwErrCode=0x0) 
	[0051.525] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.525] GetLastError () returned 0x5
	[0051.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.525] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0051.533] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0051.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bci.dll", cAlternateFileName="")) returned 1
	[0051.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0051.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1
	[0051.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="deploy.dll", cAlternateFileName="")) returned 1
	[0051.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0051.534] SetLastError (dwErrCode=0x0) 
	[0051.535] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.535] GetLastError () returned 0x5
	[0051.535] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.535] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.536] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.536] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0051.536] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1
	[0051.536] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0
	[0051.536] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.536] SetLastError (dwErrCode=0x0) 
	[0051.536] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.536] GetLastError () returned 0x5
	[0051.536] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.537] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eula.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="glass.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hprof.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="java.dll", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1
	[0051.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1
	[0051.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4
	[0051.538] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.538] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jawt.dll", cAlternateFileName="")) returned 1
	[0051.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfr.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jjs.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jli.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jsound.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kcms.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="keytool.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kinit.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="klist.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ktab.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lcms.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="net.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nio.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="npt.dll", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="orbd.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pack200.exe", cAlternateFileName="")) returned 1
	[0051.719] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0051.719] SetLastError (dwErrCode=0x0) 
	[0051.719] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.720] GetLastError () returned 0x5
	[0051.720] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.720] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0051.720] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.720] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0051.720] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1
	[0051.720] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0
	[0051.720] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0051.721] SetLastError (dwErrCode=0x0) 
	[0051.721] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.721] GetLastError () returned 0x5
	[0051.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.721] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="resource.dll", cAlternateFileName="")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="rmid.exe", cAlternateFileName="")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="server", cAlternateFileName="")) returned 1
	[0051.721] SetLastError (dwErrCode=0x0) 
	[0051.721] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.721] GetLastError () returned 0x5
	[0051.721] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.721] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.721] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0051.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc
	[0051.722] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.723] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jvm.dll", cAlternateFileName="")) returned 1
	[0051.723] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1
	[0051.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0
	[0051.723] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.723] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0
	[0051.723] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0051.723] SetLastError (dwErrCode=0x0) 
	[0051.724] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.724] GetLastError () returned 0x5
	[0051.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.724] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ssv.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sunec.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="t2k.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="unpack.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="verify.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zip.dll", cAlternateFileName="")) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zip.dll", cAlternateFileName="")) returned 0
	[0051.724] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0051.724] SetLastError (dwErrCode=0x0) 
	[0051.724] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.724] GetLastError () returned 0x5
	[0051.724] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.724] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.724] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0051.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0
	[0051.725] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.725] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lib", cAlternateFileName="")) returned 1
	[0051.725] SetLastError (dwErrCode=0x0) 
	[0051.725] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.725] GetLastError () returned 0x5
	[0051.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0051.725] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0051.739] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.740] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1
	[0051.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4
	[0051.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.741] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="amd64", cAlternateFileName="")) returned 1
	[0051.741] SetLastError (dwErrCode=0x0) 
	[0051.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.741] GetLastError () returned 0x5
	[0051.741] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.741] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.742] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.742] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1
	[0051.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc
	[0051.743] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.743] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0
	[0051.743] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.743] SetLastError (dwErrCode=0x0) 
	[0051.743] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.743] GetLastError () returned 0x5
	[0051.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.743] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.743] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="applet", cAlternateFileName="")) returned 1
	[0051.743] SetLastError (dwErrCode=0x0) 
	[0051.743] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.743] GetLastError () returned 0x5
	[0051.743] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.743] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0051.744] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.744] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0051.744] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0051.744] SetLastError (dwErrCode=0x0) 
	[0051.744] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.744] GetLastError () returned 0x5
	[0051.744] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.744] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.744] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0051.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8
	[0051.745] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.745] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="charsets.jar", cAlternateFileName="")) returned 1
	[0051.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0
	[0051.745] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.746] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1
	[0051.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd4
	[0051.746] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.746] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cmm", cAlternateFileName="")) returned 1
	[0051.746] SetLastError (dwErrCode=0x0) 
	[0051.746] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.746] GetLastError () returned 0x5
	[0051.747] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.747] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbe90
	[0051.747] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.747] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1
	[0051.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc
	[0051.748] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.748] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1
	[0051.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0
	[0051.749] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.749] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1
	[0051.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4
	[0051.749] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.749] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1
	[0051.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8
	[0051.750] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.750] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1
	[0051.750] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec
	[0051.751] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.751] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0
	[0051.751] FindClose (in: hFindFile=0x274bd1fbe90 | out: hFindFile=0x274bd1fbe90) returned 1
	[0051.751] SetLastError (dwErrCode=0x0) 
	[0051.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.751] GetLastError () returned 0x5
	[0051.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.751] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.751] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0051.751] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8
	[0051.752] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.752] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1
	[0051.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0
	[0051.753] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.753] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="deploy", cAlternateFileName="")) returned 1
	[0051.753] SetLastError (dwErrCode=0x0) 
	[0051.753] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.753] GetLastError () returned 0x5
	[0051.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.753] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.753] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0051.766] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.766] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1
	[0051.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8
	[0051.767] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.767] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1
	[0051.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc
	[0051.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.768] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1
	[0051.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04
	[0051.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.769] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1
	[0051.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08
	[0051.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.769] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1
	[0051.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c
	[0051.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.770] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1
	[0051.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10
	[0051.771] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.771] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1
	[0051.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14
	[0051.771] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.771] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1
	[0051.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18
	[0051.772] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.772] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1
	[0051.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c
	[0051.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.773] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1
	[0051.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20
	[0051.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.774] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1
	[0051.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24
	[0051.774] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.774] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1
	[0051.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28
	[0051.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.775] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1
	[0051.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c
	[0051.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.776] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="splash.gif", cAlternateFileName="")) returned 1
	[0051.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30
	[0051.776] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.777] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1
	[0051.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34
	[0051.777] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.777] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1
	[0051.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38
	[0051.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.778] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1
	[0051.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c
	[0051.779] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.779] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0
	[0051.779] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0051.780] SetLastError (dwErrCode=0x0) 
	[0051.780] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.781] GetLastError () returned 0x5
	[0051.781] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.781] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.781] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0051.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4
	[0051.782] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.782] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ext", cAlternateFileName="")) returned 1
	[0051.782] SetLastError (dwErrCode=0x0) 
	[0051.782] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.782] GetLastError () returned 0x5
	[0051.782] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.782] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.782] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.788] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.788] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1
	[0051.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44
	[0051.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.789] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1
	[0051.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48
	[0051.790] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.790] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1
	[0051.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c
	[0051.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.791] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1
	[0051.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50
	[0051.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.792] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1
	[0051.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54
	[0051.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.792] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1
	[0051.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58
	[0051.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.793] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0051.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c
	[0051.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.794] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1
	[0051.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60
	[0051.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.795] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sunec.jar", cAlternateFileName="")) returned 1
	[0051.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64
	[0051.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.795] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1
	[0051.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68
	[0051.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.796] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1
	[0051.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c
	[0051.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.797] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1
	[0051.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70
	[0051.797] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.797] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1
	[0051.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74
	[0051.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.798] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0
	[0051.798] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.799] SetLastError (dwErrCode=0x0) 
	[0051.799] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.801] GetLastError () returned 0x5
	[0051.801] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.801] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.801] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0051.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40
	[0051.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.801] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1
	[0051.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78
	[0051.802] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.802] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1
	[0051.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c
	[0051.803] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.803] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0051.803] SetLastError (dwErrCode=0x0) 
	[0051.803] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.803] GetLastError () returned 0x5
	[0051.803] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.803] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.820] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.820] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1
	[0051.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84
	[0051.820] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.821] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1
	[0051.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88
	[0051.821] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.821] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1
	[0051.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c
	[0051.822] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.822] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1
	[0051.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90
	[0051.823] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.823] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1
	[0051.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94
	[0051.824] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.824] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1
	[0051.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98
	[0051.824] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.825] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1
	[0051.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c
	[0051.825] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.825] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1
	[0051.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0
	[0051.826] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.826] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0
	[0051.826] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.827] SetLastError (dwErrCode=0x0) 
	[0051.827] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.828] GetLastError () returned 0x5
	[0051.828] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.828] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.828] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0051.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80
	[0051.829] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.829] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="images", cAlternateFileName="")) returned 1
	[0051.829] SetLastError (dwErrCode=0x0) 
	[0051.829] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.829] GetLastError () returned 0x5
	[0051.829] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.829] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.830] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.830] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cursors", cAlternateFileName="")) returned 1
	[0051.830] SetLastError (dwErrCode=0x0) 
	[0051.830] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.830] GetLastError () returned 0x5
	[0051.830] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0051.830] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0051.840] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.840] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1
	[0051.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac
	[0051.841] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.841] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1
	[0051.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0
	[0051.841] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.842] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1
	[0051.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4
	[0051.842] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.843] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1
	[0051.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8
	[0051.843] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.843] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1
	[0051.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc
	[0051.844] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.844] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1
	[0051.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0
	[0051.845] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.845] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1
	[0051.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6f2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4
	[0051.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.846] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1
	[0051.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d72970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8
	[0051.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.847] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0
	[0051.847] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0051.847] SetLastError (dwErrCode=0x0) 
	[0051.847] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.849] GetLastError () returned 0x5
	[0051.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0051.849] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.849] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cursors", cAlternateFileName="")) returned 0
	[0051.849] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.849] SetLastError (dwErrCode=0x0) 
	[0051.849] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.849] GetLastError () returned 0x5
	[0051.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.849] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.849] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0051.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d76040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4
	[0051.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.850] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javaws.jar", cAlternateFileName="")) returned 1
	[0051.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d79710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8
	[0051.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.851] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jce.jar", cAlternateFileName="")) returned 1
	[0051.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d7cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc
	[0051.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.852] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfr", cAlternateFileName="")) returned 1
	[0051.852] SetLastError (dwErrCode=0x0) 
	[0051.852] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.852] GetLastError () returned 0x5
	[0051.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.852] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0051.853] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.853] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="default.jfc", cAlternateFileName="")) returned 1
	[0051.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d804b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4
	[0051.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.854] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="profile.jfc", cAlternateFileName="")) returned 1
	[0051.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d83b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8
	[0051.854] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.854] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="profile.jfc", cAlternateFileName="")) returned 0
	[0051.854] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0051.855] SetLastError (dwErrCode=0x0) 
	[0051.855] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.855] GetLastError () returned 0x5
	[0051.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.855] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.855] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0051.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d87250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0
	[0051.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.856] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1
	[0051.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc
	[0051.856] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.856] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jsse.jar", cAlternateFileName="")) returned 1
	[0051.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8dff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0
	[0051.857] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.857] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1
	[0051.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d916c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4
	[0051.858] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.858] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1
	[0051.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d94d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8
	[0051.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.859] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1
	[0051.859] SetLastError (dwErrCode=0x0) 
	[0051.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.859] GetLastError () returned 0x5
	[0051.859] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.859] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.859] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0051.961] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.961] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1
	[0051.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d98460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0
	[0051.962] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.962] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1
	[0051.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4
	[0051.963] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.963] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1
	[0051.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8
	[0051.963] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.964] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1
	[0051.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da28d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc
	[0051.964] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.965] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0
	[0051.965] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0051.965] SetLastError (dwErrCode=0x0) 
	[0051.965] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.967] GetLastError () returned 0x5
	[0051.967] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.967] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0051.967] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da5fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec
	[0051.968] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1
	[0051.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00
	[0051.968] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.969] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1
	[0051.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04
	[0051.969] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.969] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="plugin.jar", cAlternateFileName="")) returned 1
	[0051.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db0410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08
	[0051.970] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.970] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1
	[0051.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db3ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c
	[0051.971] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.971] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1
	[0051.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db71b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10
	[0051.972] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1
	[0051.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dba880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14
	[0051.973] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="rt.jar", cAlternateFileName="")) returned 1
	[0051.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dbdf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18
	[0051.974] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.974] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="security", cAlternateFileName="")) returned 1
	[0051.974] SetLastError (dwErrCode=0x0) 
	[0051.974] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.974] GetLastError () returned 0x5
	[0051.974] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0051.974] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0051.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0051.991] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0051.991] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1
	[0051.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc1620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20
	[0051.992] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.992] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1
	[0051.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc4cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24
	[0051.993] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.993] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cacerts", cAlternateFileName="")) returned 1
	[0051.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc83c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28
	[0051.994] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.994] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1
	[0051.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcba90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c
	[0051.995] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.995] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1
	[0051.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcf160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30
	[0051.996] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.996] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1
	[0051.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34
	[0051.996] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.997] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1
	[0051.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd5f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38
	[0051.997] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.998] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1
	[0051.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd95d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c
	[0051.998] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0051.999] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1
	[0051.999] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0051.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ddcca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40
	[0051.999] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.000] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0
	[0052.000] FindClose (in: hFindFile=0x274bd1fb890 | out: hFindFile=0x274bd1fb890) returned 1
	[0052.000] SetLastError (dwErrCode=0x0) 
	[0052.000] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.002] GetLastError () returned 0x5
	[0052.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0052.002] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.002] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0052.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de0370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c
	[0052.003] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.003] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1
	[0052.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de3a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44
	[0052.007] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.007] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1
	[0052.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de7110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48
	[0052.008] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.008] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0
	[0052.008] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0052.008] SetLastError (dwErrCode=0x0) 
	[0052.008] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.009] GetLastError () returned 0x5
	[0052.009] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0052.009] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.009] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0052.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dea7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8
	[0052.009] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.010] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="README.txt", cAlternateFileName="")) returned 1
	[0052.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dedeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c
	[0052.010] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.010] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="release", cAlternateFileName="")) returned 1
	[0052.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df1580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50
	[0052.011] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.011] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1
	[0052.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df4c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54
	[0052.012] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.012] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1
	[0052.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df8320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd58
	[0052.013] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.013] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1
	[0052.013] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dfb9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c
	[0052.014] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.014] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0
	[0052.014] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0052.014] SetLastError (dwErrCode=0x0) 
	[0052.014] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.014] GetLastError () returned 0x5
	[0052.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0052.015] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.015] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 0
	[0052.015] FindClose (in: hFindFile=0x274bd1fb650 | out: hFindFile=0x274bd1fb650) returned 1
	[0052.015] SetLastError (dwErrCode=0x0) 
	[0052.015] CreateFileW (lpFileName="C:\\Program Files\\Java\\RyukReadMe.txt" (normalized: "c:\\program files\\java\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.015] GetLastError () returned 0x5
	[0052.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0052.015] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.015] FindNextFileW (in: hFindFile=0x274bd1fbcb0, lpFindFileData=0xe68cf7e3d0 | out: lpFindFileData=0xe68cf7e3d0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8f4b203, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0x8f4b203, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0052.015] SetLastError (dwErrCode=0x0) 
	[0052.015] CreateFileW (lpFileName="C:\\Program Files\\RyukReadMe.txt" (normalized: "c:\\program files\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.015] GetLastError () returned 0x5
	[0052.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7e370, lpOverlapped=0x0) returned 0
	[0052.015] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*.*", lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8f4b203, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0x8f4b203, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb650
	[0052.015] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8f4b203, ftLastAccessTime.dwHighDateTime=0x1d51927, ftLastWriteTime.dwLowDateTime=0x8f4b203, ftLastWriteTime.dwHighDateTime=0x1d51927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.015] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0052.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dff0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x990
	[0052.016] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.016] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1
	[0052.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e02790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60
	[0052.017] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.017] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0052.017] SetLastError (dwErrCode=0x0) 
	[0052.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.017] GetLastError () returned 0x5
	[0052.017] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0052.017] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.017] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0052.018] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.018] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1
	[0052.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e05e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68
	[0052.019] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.019] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1
	[0052.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e09530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c
	[0052.020] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.020] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0052.020] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1
	[0052.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e0cc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70
	[0052.021] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.021] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0
	[0052.021] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0052.021] SetLastError (dwErrCode=0x0) 
	[0052.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.021] GetLastError () returned 0x5
	[0052.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0052.021] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.021] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0052.021] SetLastError (dwErrCode=0x0) 
	[0052.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.021] GetLastError () returned 0x5
	[0052.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0052.022] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0052.022] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0052.376] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0052.378] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1
	[0052.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74
	[0052.379] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.379] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1
	[0052.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78
	[0052.380] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.380] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1
	[0052.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c
	[0052.380] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.380] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1
	[0052.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80
	[0052.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.381] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1
	[0052.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84
	[0052.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.382] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1
	[0052.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88
	[0052.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.383] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1
	[0052.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c
	[0052.383] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.383] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1
	[0052.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90
	[0052.384] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.384] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1
	[0052.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd94
	[0052.385] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1
	[0052.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98
	[0052.385] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.385] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1
	[0052.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c
	[0052.386] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.386] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1
	[0052.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0
	[0052.387] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.387] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1
	[0052.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4
	[0052.387] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1
	[0052.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8
	[0052.388] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.388] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1
	[0052.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac
	[0052.389] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.389] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1
	[0052.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0
	[0052.390] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1
	[0052.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4
	[0052.390] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.390] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1
	[0052.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8
	[0052.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1
	[0052.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc
	[0052.392] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.392] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1
	[0052.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0
	[0052.393] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.393] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0052.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4
	[0052.393] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.394] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1
	[0052.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8
	[0052.394] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.394] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1
	[0052.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc
	[0052.395] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.395] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1
	[0052.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0
	[0052.396] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.396] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1
	[0052.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4
	[0052.396] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.397] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1
	[0052.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8
	[0052.397] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.397] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1
	[0052.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc
	[0052.398] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.398] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1
	[0052.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0
	[0052.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.399] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1
	[0052.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4
	[0052.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.400] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1
	[0052.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8
	[0052.400] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.400] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1
	[0052.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec
	[0052.401] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.401] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1
	[0052.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0
	[0052.402] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.402] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1
	[0052.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4
	[0052.402] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.403] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1
	[0052.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8
	[0052.403] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.403] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1
	[0052.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc
	[0052.404] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.404] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1
	[0052.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00
	[0052.405] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.405] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1
	[0052.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04
	[0052.405] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.406] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1
	[0052.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08
	[0052.406] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.406] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1
	[0052.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c
	[0052.407] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.407] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1
	[0052.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10
	[0052.408] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.408] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1
	[0052.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0052.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14
	[0052.408] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0052.409] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0
	[0052.409] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0053.081] SetLastError (dwErrCode=0x0) 
	[0053.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.081] GetLastError () returned 0x5
	[0053.081] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0053.081] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.081] FindNextFileW (in: hFindFile=0x274bd1fb650, lpFindFileData=0xe68cf7dc10 | out: lpFindFileData=0xe68cf7dc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="root", cAlternateFileName="")) returned 1
	[0053.081] SetLastError (dwErrCode=0x0) 
	[0053.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.081] GetLastError () returned 0x5
	[0053.081] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7dbb0, lpOverlapped=0x0) returned 0
	[0053.081] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*.*", lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb890
	[0053.081] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.081] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client", cAlternateFileName="")) returned 1
	[0053.081] SetLastError (dwErrCode=0x0) 
	[0053.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.082] GetLastError () returned 0x5
	[0053.082] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0053.082] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.082] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc070
	[0053.082] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1
	[0053.083] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0053.084] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0053.084] FindClose (in: hFindFile=0x274bd1fc070 | out: hFindFile=0x274bd1fc070) returned 1
	[0053.084] SetLastError (dwErrCode=0x0) 
	[0053.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.086] GetLastError () returned 0x5
	[0053.086] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0053.086] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.086] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0053.086] SetLastError (dwErrCode=0x0) 
	[0053.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.086] GetLastError () returned 0x5
	[0053.086] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0053.086] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbfb0
	[0053.086] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.086] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0053.086] SetLastError (dwErrCode=0x0) 
	[0053.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.087] GetLastError () returned 0x5
	[0053.087] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0053.087] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.087] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0053.090] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0053.090] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0053.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20
	[0053.091] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.091] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1
	[0053.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24
	[0053.092] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.092] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1
	[0053.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28
	[0053.092] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.093] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1
	[0053.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c
	[0053.093] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.093] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1
	[0053.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30
	[0053.094] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.094] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1
	[0053.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34
	[0053.094] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.095] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1
	[0053.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38
	[0053.095] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.095] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1
	[0053.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c
	[0053.096] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.096] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1
	[0053.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40
	[0053.096] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.097] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1
	[0053.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44
	[0053.097] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.098] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1
	[0053.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48
	[0053.098] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.098] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1
	[0053.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c
	[0053.099] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.099] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1
	[0053.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50
	[0053.099] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.100] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1
	[0053.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54
	[0053.100] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.100] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1
	[0053.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58
	[0053.101] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.101] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1
	[0053.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c
	[0053.101] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.102] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1
	[0053.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60
	[0053.102] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.102] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1
	[0053.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64
	[0053.103] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.103] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1
	[0053.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68
	[0053.104] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.104] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1
	[0053.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c
	[0053.104] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.104] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1
	[0053.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70
	[0053.105] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.105] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1
	[0053.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74
	[0053.106] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.106] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1
	[0053.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78
	[0053.106] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.107] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1
	[0053.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c
	[0053.107] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.107] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1
	[0053.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80
	[0053.108] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.108] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1
	[0053.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84
	[0053.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.109] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1
	[0053.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88
	[0053.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.110] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1
	[0053.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c
	[0053.110] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.110] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1
	[0053.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90
	[0053.111] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.111] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1
	[0053.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94
	[0053.112] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.112] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1
	[0053.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98
	[0053.112] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.113] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1
	[0053.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c
	[0053.113] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.113] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1
	[0053.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0
	[0053.114] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.114] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1
	[0053.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4
	[0053.348] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.348] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1
	[0053.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8
	[0053.348] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.349] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1
	[0053.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac
	[0053.349] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.349] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1
	[0053.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0
	[0053.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.350] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1
	[0053.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4
	[0053.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.351] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1
	[0053.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8
	[0053.351] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.351] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1
	[0053.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc
	[0053.352] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.352] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1
	[0053.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0
	[0053.353] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.353] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1
	[0053.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4
	[0053.353] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.353] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1
	[0053.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8
	[0053.354] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.354] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1
	[0053.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc
	[0053.355] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.355] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1
	[0053.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0
	[0053.355] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.356] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1
	[0053.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4
	[0053.356] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.356] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1
	[0053.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8
	[0053.357] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.357] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1
	[0053.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc
	[0053.357] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.358] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1
	[0053.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0
	[0053.358] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.358] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1
	[0053.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4
	[0053.359] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.359] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1
	[0053.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8
	[0053.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.360] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1
	[0053.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec
	[0053.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.361] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1
	[0053.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0
	[0053.361] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.361] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1
	[0053.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4
	[0053.362] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.362] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1
	[0053.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8
	[0053.363] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.363] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1
	[0053.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc
	[0053.364] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.364] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1
	[0053.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00
	[0053.364] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.365] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1
	[0053.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04
	[0053.365] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.365] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1
	[0053.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08
	[0053.366] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.366] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1
	[0053.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c
	[0053.367] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.367] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1
	[0053.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10
	[0053.367] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.368] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1
	[0053.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14
	[0053.368] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.368] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1
	[0053.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18
	[0053.369] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.369] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1
	[0053.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c
	[0053.370] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.370] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1
	[0053.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20
	[0053.370] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.371] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1
	[0053.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24
	[0053.371] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.371] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1
	[0053.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28
	[0053.372] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.372] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1
	[0053.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c
	[0053.374] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.374] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1
	[0053.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30
	[0053.375] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.375] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1
	[0053.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34
	[0053.376] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.376] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1
	[0053.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38
	[0053.376] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.376] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1
	[0053.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c
	[0053.377] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.377] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1
	[0053.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40
	[0053.378] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.378] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1
	[0053.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44
	[0053.379] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.379] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1
	[0053.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48
	[0053.379] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.379] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1
	[0053.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c
	[0053.380] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.380] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1
	[0053.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50
	[0053.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.381] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1
	[0053.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54
	[0053.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.382] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1
	[0053.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58
	[0053.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.382] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1
	[0053.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c
	[0053.383] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.383] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1
	[0053.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60
	[0053.384] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.384] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1
	[0053.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64
	[0053.385] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.385] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1
	[0053.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68
	[0053.386] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.386] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1
	[0053.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c
	[0053.386] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.387] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1
	[0053.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70
	[0053.387] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.387] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1
	[0053.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74
	[0053.388] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.388] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1
	[0053.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78
	[0053.389] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.389] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1
	[0053.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c
	[0053.390] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.390] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1
	[0053.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80
	[0053.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.391] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1
	[0053.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84
	[0053.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.392] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1
	[0053.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88
	[0053.392] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.392] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1
	[0053.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c
	[0053.393] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.393] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1
	[0053.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x924
	[0053.517] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.517] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1
	[0053.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90
	[0053.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.518] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1
	[0053.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94
	[0053.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.518] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1
	[0053.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98
	[0053.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.519] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1
	[0053.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c
	[0053.520] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.520] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1
	[0053.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0
	[0053.520] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.521] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1
	[0053.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4
	[0053.521] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.521] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1
	[0053.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8
	[0053.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.522] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1
	[0053.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac
	[0053.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.523] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1
	[0053.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0
	[0053.524] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.524] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1
	[0053.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4
	[0053.525] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.525] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1
	[0053.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8
	[0053.525] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.525] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1
	[0053.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc
	[0053.526] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.526] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1
	[0053.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0
	[0053.527] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.527] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1
	[0053.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4
	[0053.528] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1
	[0053.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8
	[0053.528] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.528] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1
	[0053.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc
	[0053.529] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.529] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1
	[0053.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0
	[0053.530] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.530] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1
	[0053.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4
	[0053.531] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.531] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1
	[0053.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8
	[0053.531] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.532] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1
	[0053.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc
	[0053.532] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.532] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1
	[0053.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0
	[0053.533] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.533] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1
	[0053.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4
	[0053.533] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.534] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1
	[0053.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8
	[0053.534] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.534] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1
	[0053.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec
	[0053.535] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.535] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1
	[0053.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0
	[0053.536] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.536] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1
	[0053.536] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4
	[0053.536] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.537] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1
	[0053.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8
	[0053.537] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.537] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1
	[0053.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc
	[0053.538] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.538] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1
	[0053.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004
	[0053.539] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.539] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1
	[0053.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008
	[0053.539] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.540] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1
	[0053.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c
	[0053.540] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.540] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1
	[0053.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010
	[0053.541] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.541] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1
	[0053.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014
	[0053.542] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.542] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1
	[0053.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018
	[0053.542] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.542] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1
	[0053.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c
	[0053.543] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.543] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1
	[0053.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020
	[0053.544] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.544] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1
	[0053.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024
	[0053.544] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1
	[0053.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028
	[0053.545] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.545] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1
	[0053.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c
	[0053.546] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.546] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1
	[0053.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030
	[0053.547] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.547] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1
	[0053.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034
	[0053.547] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.548] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1
	[0053.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038
	[0053.548] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.548] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1
	[0053.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c
	[0053.666] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.666] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1
	[0053.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040
	[0053.667] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.667] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1
	[0053.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044
	[0053.668] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.668] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1
	[0053.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048
	[0053.668] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.668] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1
	[0053.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c
	[0053.669] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.669] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1
	[0053.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050
	[0053.670] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.670] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1
	[0053.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054
	[0053.670] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.670] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1
	[0053.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058
	[0053.671] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.671] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1
	[0053.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c
	[0053.672] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.672] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1
	[0053.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060
	[0053.672] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.673] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1
	[0053.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064
	[0053.673] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.673] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1
	[0053.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068
	[0053.674] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.674] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1
	[0053.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c
	[0053.674] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.675] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1
	[0053.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070
	[0053.675] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.676] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1
	[0053.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074
	[0053.676] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.676] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1
	[0053.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078
	[0053.677] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.677] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1
	[0053.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c
	[0053.678] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.678] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1
	[0053.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080
	[0053.678] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.679] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1
	[0053.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084
	[0053.679] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.679] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1
	[0053.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088
	[0053.680] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.680] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1
	[0053.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c
	[0053.681] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.681] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1
	[0053.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090
	[0053.681] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.682] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1
	[0053.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094
	[0053.682] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.682] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1
	[0053.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098
	[0053.683] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.683] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1
	[0053.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c
	[0053.684] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.684] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1
	[0053.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0
	[0053.684] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1
	[0053.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4
	[0053.685] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1
	[0053.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8
	[0053.686] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.686] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1
	[0053.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac
	[0053.686] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.687] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1
	[0053.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0
	[0053.687] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.687] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1
	[0053.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4
	[0053.688] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.688] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1
	[0053.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8
	[0053.689] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1
	[0053.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc
	[0053.689] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1
	[0053.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0
	[0053.690] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1
	[0053.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4
	[0053.692] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.692] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1
	[0053.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8
	[0053.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.693] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1
	[0053.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc
	[0053.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.694] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1
	[0053.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0
	[0053.694] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.694] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1
	[0053.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4
	[0053.695] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.695] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1
	[0053.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8
	[0053.696] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.696] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1
	[0053.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc
	[0053.696] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.697] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1
	[0053.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0
	[0053.697] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.697] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1
	[0053.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4
	[0053.698] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.698] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1
	[0053.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8
	[0053.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.699] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1
	[0053.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec
	[0053.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.700] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1
	[0053.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0
	[0053.700] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.700] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1
	[0053.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4
	[0053.701] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.701] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1
	[0053.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8
	[0053.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.702] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1
	[0053.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc
	[0053.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.703] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1
	[0053.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100
	[0053.703] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.703] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1
	[0053.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104
	[0053.704] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.704] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1
	[0053.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108
	[0053.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.705] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1
	[0053.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c
	[0053.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.706] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1
	[0053.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110
	[0053.837] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.837] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1
	[0053.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1114
	[0053.838] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.838] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1
	[0053.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118
	[0053.838] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.838] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1
	[0053.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c
	[0053.839] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.839] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1
	[0053.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120
	[0053.840] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.840] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1
	[0053.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124
	[0053.840] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.841] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1
	[0053.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128
	[0053.841] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.841] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1
	[0053.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c
	[0053.842] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.842] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1
	[0053.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130
	[0053.842] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.843] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1
	[0053.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134
	[0053.843] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.843] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1
	[0053.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138
	[0053.844] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.844] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1
	[0053.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c
	[0053.845] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.845] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1
	[0053.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140
	[0053.845] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.845] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1
	[0053.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144
	[0053.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.846] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1
	[0053.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148
	[0053.847] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.847] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1
	[0053.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c
	[0053.848] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.849] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1
	[0053.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150
	[0053.849] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.849] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1
	[0053.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154
	[0053.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.850] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1
	[0053.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158
	[0053.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.851] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1
	[0053.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c
	[0053.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.851] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1
	[0053.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160
	[0053.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.852] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1
	[0053.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164
	[0053.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.853] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1
	[0053.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168
	[0053.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.854] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1
	[0053.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c
	[0053.854] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.854] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1
	[0053.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170
	[0053.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.855] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1
	[0053.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174
	[0053.856] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.856] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1
	[0053.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178
	[0053.856] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.857] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1
	[0053.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c
	[0053.857] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.857] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1
	[0053.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180
	[0053.858] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.858] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1
	[0053.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184
	[0053.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.859] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1
	[0053.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188
	[0053.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.860] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1
	[0053.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c
	[0053.860] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.860] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1
	[0053.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190
	[0053.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.861] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1
	[0053.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194
	[0053.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.862] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1
	[0053.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198
	[0053.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.863] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1
	[0053.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c
	[0053.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.864] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1
	[0053.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0
	[0053.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.864] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1
	[0053.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4
	[0053.865] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.865] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1
	[0053.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8
	[0053.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.866] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1
	[0053.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac
	[0053.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.867] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1
	[0053.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0
	[0053.867] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.867] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1
	[0053.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4
	[0053.868] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.868] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1
	[0053.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8
	[0053.869] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.869] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1
	[0053.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc
	[0053.869] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.870] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1
	[0053.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0
	[0053.870] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.870] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1
	[0053.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4
	[0053.871] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.871] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1
	[0053.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8
	[0053.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.872] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1
	[0053.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc
	[0053.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.873] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1
	[0053.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0053.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0
	[0053.873] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.874] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1
	[0054.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4
	[0054.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.140] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1
	[0054.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8
	[0054.140] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.140] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1
	[0054.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc
	[0054.141] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.141] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01772_.WMF", cAlternateFileName="")) returned 1
	[0054.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0
	[0054.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.142] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DD01793_.WMF", cAlternateFileName="")) returned 1
	[0054.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4
	[0054.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.142] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec9380a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec9380a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf42d018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1815, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EAST_01.MID", cAlternateFileName="")) returned 1
	[0054.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8
	[0054.143] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.143] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ED00010_.WMF", cAlternateFileName="")) returned 1
	[0054.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec
	[0054.144] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.144] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ED00019_.WMF", cAlternateFileName="")) returned 1
	[0054.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0
	[0054.145] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.145] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ED00172_.WMF", cAlternateFileName="")) returned 1
	[0054.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4
	[0054.145] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.146] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ED00184_.WMF", cAlternateFileName="")) returned 1
	[0054.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8
	[0054.146] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.146] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00006_.WMF", cAlternateFileName="")) returned 1
	[0054.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc
	[0054.147] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.147] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b1a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00202_.WMF", cAlternateFileName="")) returned 1
	[0054.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1200
	[0054.147] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.148] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3044, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00222_.WMF", cAlternateFileName="")) returned 1
	[0054.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1204
	[0054.148] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.148] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00242_.WMF", cAlternateFileName="")) returned 1
	[0054.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1208
	[0054.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.149] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00319_.WMF", cAlternateFileName="")) returned 1
	[0054.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x120c
	[0054.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.150] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00320_.WMF", cAlternateFileName="")) returned 1
	[0054.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1210
	[0054.150] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.150] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x439c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00397_.WMF", cAlternateFileName="")) returned 1
	[0054.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1214
	[0054.151] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.151] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EN00902_.WMF", cAlternateFileName="")) returned 1
	[0054.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1218
	[0054.151] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.152] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2942, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPLR_01.MID", cAlternateFileName="")) returned 1
	[0054.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x121c
	[0054.152] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.152] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FALL_01.MID", cAlternateFileName="")) returned 1
	[0054.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1220
	[0054.153] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.153] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00074_.WMF", cAlternateFileName="")) returned 1
	[0054.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1224
	[0054.154] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.154] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00076_.WMF", cAlternateFileName="")) returned 1
	[0054.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1228
	[0054.154] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.155] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7620, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00077_.WMF", cAlternateFileName="")) returned 1
	[0054.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x122c
	[0054.155] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.155] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00086_.WMF", cAlternateFileName="")) returned 1
	[0054.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1230
	[0054.156] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.156] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3772, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00090_.WMF", cAlternateFileName="")) returned 1
	[0054.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1234
	[0054.156] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.157] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x920e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00096_.WMF", cAlternateFileName="")) returned 1
	[0054.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1238
	[0054.157] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.157] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc55757, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc55757, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3df0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00296_.WMF", cAlternateFileName="")) returned 1
	[0054.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x123c
	[0054.158] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.158] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc7b993, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4712, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00297_.WMF", cAlternateFileName="")) returned 1
	[0054.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1240
	[0054.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.159] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00306_.WMF", cAlternateFileName="")) returned 1
	[0054.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1244
	[0054.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.160] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00336_.WMF", cAlternateFileName="")) returned 1
	[0054.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1248
	[0054.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.161] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00361_.WMF", cAlternateFileName="")) returned 1
	[0054.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x124c
	[0054.161] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.161] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc55757, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2168, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00369_.WMF", cAlternateFileName="")) returned 1
	[0054.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1250
	[0054.162] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.162] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00382_.WMF", cAlternateFileName="")) returned 1
	[0054.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1254
	[0054.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.163] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc2f4b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc2f4b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00397_.WMF", cAlternateFileName="")) returned 1
	[0054.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1258
	[0054.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.163] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdc09280, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdc09280, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc2f4b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00403_.WMF", cAlternateFileName="")) returned 1
	[0054.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x125c
	[0054.165] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.165] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2afa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00414_.WMF", cAlternateFileName="")) returned 1
	[0054.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1260
	[0054.166] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.166] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00419_.WMF", cAlternateFileName="")) returned 1
	[0054.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1264
	[0054.167] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.167] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00428_.WMF", cAlternateFileName="")) returned 1
	[0054.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1268
	[0054.167] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.168] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00435_.WMF", cAlternateFileName="")) returned 1
	[0054.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x126c
	[0054.168] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.168] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00438_.WMF", cAlternateFileName="")) returned 1
	[0054.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1270
	[0054.169] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.169] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00455_.WMF", cAlternateFileName="")) returned 1
	[0054.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1274
	[0054.169] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43fe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00459_.WMF", cAlternateFileName="")) returned 1
	[0054.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1278
	[0054.170] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.170] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00543_.WMF", cAlternateFileName="")) returned 1
	[0054.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x127c
	[0054.171] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.171] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00544_.WMF", cAlternateFileName="")) returned 1
	[0054.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1280
	[0054.172] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.172] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00564_.WMF", cAlternateFileName="")) returned 1
	[0054.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1284
	[0054.172] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.173] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00586_.WMF", cAlternateFileName="")) returned 1
	[0054.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1288
	[0054.173] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.173] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00775_.WMF", cAlternateFileName="")) returned 1
	[0054.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x128c
	[0054.174] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.174] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2332, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00779_.WMF", cAlternateFileName="")) returned 1
	[0054.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1290
	[0054.175] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.296] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3690, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00799_.WMF", cAlternateFileName="")) returned 1
	[0054.296] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1294
	[0054.296] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.297] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00814_.WMF", cAlternateFileName="")) returned 1
	[0054.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1298
	[0054.303] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.303] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD00965_.WMF", cAlternateFileName="")) returned 1
	[0054.303] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x129c
	[0054.304] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.304] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01074_.WMF", cAlternateFileName="")) returned 1
	[0054.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a0
	[0054.304] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.304] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01084_.WMF", cAlternateFileName="")) returned 1
	[0054.304] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a4
	[0054.305] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.305] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01176_.WMF", cAlternateFileName="")) returned 1
	[0054.305] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12a8
	[0054.306] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.306] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeb7dac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeb7dac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeb7dac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01191_.WMF", cAlternateFileName="")) returned 1
	[0054.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ac
	[0054.306] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.306] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x488, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01193_.WMF", cAlternateFileName="")) returned 1
	[0054.306] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b0
	[0054.307] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.307] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01196_.WMF", cAlternateFileName="")) returned 1
	[0054.307] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b4
	[0054.308] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.308] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x284c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01548_.WMF", cAlternateFileName="")) returned 1
	[0054.308] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12b8
	[0054.308] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.309] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01657_.WMF", cAlternateFileName="")) returned 1
	[0054.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12bc
	[0054.309] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.309] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4604, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01658_.WMF", cAlternateFileName="")) returned 1
	[0054.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c0
	[0054.310] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.310] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01659_.WMF", cAlternateFileName="")) returned 1
	[0054.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c4
	[0054.311] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.311] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD01660_.WMF", cAlternateFileName="")) returned 1
	[0054.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12c8
	[0054.312] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.312] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02068_.WMF", cAlternateFileName="")) returned 1
	[0054.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12cc
	[0054.312] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.312] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02071_.WMF", cAlternateFileName="")) returned 1
	[0054.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d0
	[0054.313] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.313] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdeddf37, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02075_.WMF", cAlternateFileName="")) returned 1
	[0054.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d4
	[0054.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.314] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02088_.WMF", cAlternateFileName="")) returned 1
	[0054.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12d8
	[0054.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.315] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02097_.WMF", cAlternateFileName="")) returned 1
	[0054.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12dc
	[0054.315] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.315] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1234, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02115_.WMF", cAlternateFileName="")) returned 1
	[0054.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e0
	[0054.316] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.316] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02116_.WMF", cAlternateFileName="")) returned 1
	[0054.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e4
	[0054.318] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.318] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02141_.WMF", cAlternateFileName="")) returned 1
	[0054.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12e8
	[0054.319] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.319] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1510, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02153_.WMF", cAlternateFileName="")) returned 1
	[0054.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec
	[0054.320] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.320] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02158_.WMF", cAlternateFileName="")) returned 1
	[0054.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0
	[0054.320] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.321] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FD02161_.WMF", cAlternateFileName="")) returned 1
	[0054.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4
	[0054.321] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.321] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf2a4e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf2a4e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FINCL_01.MID", cAlternateFileName="")) returned 1
	[0054.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8
	[0054.322] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.322] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdeddf37, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdeddf37, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf2a4e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FINCL_02.MID", cAlternateFileName="")) returned 1
	[0054.322] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc
	[0054.323] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.323] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLAP.WMF", cAlternateFileName="")) returned 1
	[0054.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300
	[0054.323] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.323] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRDEN_01.MID", cAlternateFileName="")) returned 1
	[0054.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304
	[0054.324] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.324] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRID_01.MID", cAlternateFileName="")) returned 1
	[0054.324] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308
	[0054.325] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.325] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00057_.WMF", cAlternateFileName="")) returned 1
	[0054.325] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c
	[0054.325] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.326] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00084_.WMF", cAlternateFileName="")) returned 1
	[0054.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310
	[0054.326] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.326] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00231_.WMF", cAlternateFileName="")) returned 1
	[0054.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314
	[0054.327] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.327] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00235_.WMF", cAlternateFileName="")) returned 1
	[0054.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1318
	[0054.328] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.328] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00236_.WMF", cAlternateFileName="")) returned 1
	[0054.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x131c
	[0054.328] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.329] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00241_.WMF", cAlternateFileName="")) returned 1
	[0054.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320
	[0054.329] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.329] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf50660, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00260_.WMF", cAlternateFileName="")) returned 1
	[0054.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324
	[0054.330] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.330] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00276_.WMF", cAlternateFileName="")) returned 1
	[0054.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328
	[0054.331] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.331] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00334_.WMF", cAlternateFileName="")) returned 1
	[0054.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x132c
	[0054.439] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.439] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00443_.WMF", cAlternateFileName="")) returned 1
	[0054.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1330
	[0054.440] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.440] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00513_.WMF", cAlternateFileName="")) returned 1
	[0054.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1334
	[0054.441] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.441] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00524_.WMF", cAlternateFileName="")) returned 1
	[0054.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1338
	[0054.441] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.442] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00526_.WMF", cAlternateFileName="")) returned 1
	[0054.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x133c
	[0054.442] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.442] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00527_.WMF", cAlternateFileName="")) returned 1
	[0054.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1340
	[0054.443] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.443] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00546_.WMF", cAlternateFileName="")) returned 1
	[0054.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1344
	[0054.443] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.444] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00601_.WMF", cAlternateFileName="")) returned 1
	[0054.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1348
	[0054.444] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.444] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf50660, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf50660, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00602_.WMF", cAlternateFileName="")) returned 1
	[0054.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x134c
	[0054.445] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.445] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3158, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00612_.WMF", cAlternateFileName="")) returned 1
	[0054.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1350
	[0054.446] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.446] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00623_.WMF", cAlternateFileName="")) returned 1
	[0054.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1354
	[0054.446] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.446] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x844, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00625_.WMF", cAlternateFileName="")) returned 1
	[0054.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1358
	[0054.447] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.447] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00636_.WMF", cAlternateFileName="")) returned 1
	[0054.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x135c
	[0054.448] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.448] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00669_.WMF", cAlternateFileName="")) returned 1
	[0054.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1360
	[0054.449] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.449] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2454, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00681_.WMF", cAlternateFileName="")) returned 1
	[0054.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1364
	[0054.449] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.450] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00685_.WMF", cAlternateFileName="")) returned 1
	[0054.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1368
	[0054.450] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.450] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00687_.WMF", cAlternateFileName="")) returned 1
	[0054.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x136c
	[0054.452] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.452] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00688_.WMF", cAlternateFileName="")) returned 1
	[0054.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1370
	[0054.453] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.453] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf76988, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf76988, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf76988, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH00693_.WMF", cAlternateFileName="")) returned 1
	[0054.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1374
	[0054.454] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.454] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01013_.WMF", cAlternateFileName="")) returned 1
	[0054.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1378
	[0054.454] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.454] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01015_.WMF", cAlternateFileName="")) returned 1
	[0054.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x137c
	[0054.455] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.455] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01058_.WMF", cAlternateFileName="")) returned 1
	[0054.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1380
	[0054.456] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.456] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01065_.WMF", cAlternateFileName="")) returned 1
	[0054.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1384
	[0054.456] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.457] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1388, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01080_.WMF", cAlternateFileName="")) returned 1
	[0054.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1388
	[0054.457] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.457] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01242_.WMF", cAlternateFileName="")) returned 1
	[0054.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x138c
	[0054.458] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.458] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dbe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01291_.WMF", cAlternateFileName="")) returned 1
	[0054.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1390
	[0054.459] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.459] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01329_.WMF", cAlternateFileName="")) returned 1
	[0054.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1394
	[0054.460] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.460] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1746, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01461_.WMF", cAlternateFileName="")) returned 1
	[0054.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1398
	[0054.460] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01618_.WMF", cAlternateFileName="")) returned 1
	[0054.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x139c
	[0054.461] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.461] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1526, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01759_.WMF", cAlternateFileName="")) returned 1
	[0054.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a0
	[0054.462] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.462] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01875_.WMF", cAlternateFileName="")) returned 1
	[0054.462] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a4
	[0054.463] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.463] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6852, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH01923_.WMF", cAlternateFileName="")) returned 1
	[0054.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13a8
	[0054.463] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.464] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH02155_.WMF", cAlternateFileName="")) returned 1
	[0054.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ac
	[0054.464] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.464] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH02166_.WMF", cAlternateFileName="")) returned 1
	[0054.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b0
	[0054.465] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.465] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH02282_.WMF", cAlternateFileName="")) returned 1
	[0054.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b4
	[0054.466] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.466] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH02298_.WMF", cAlternateFileName="")) returned 1
	[0054.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13b8
	[0054.466] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.467] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH02312_.WMF", cAlternateFileName="")) returned 1
	[0054.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.467] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13bc
	[0054.467] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.467] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HH02313_.WMF", cAlternateFileName="")) returned 1
	[0054.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c0
	[0054.468] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.468] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdf9cafe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdf9cafe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdf9cafe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HM00005_.WMF", cAlternateFileName="")) returned 1
	[0054.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c4
	[0054.469] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.469] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5664, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HM00114_.WMF", cAlternateFileName="")) returned 1
	[0054.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13c8
	[0054.469] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.470] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HM00116_.WMF", cAlternateFileName="")) returned 1
	[0054.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13cc
	[0054.470] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.470] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HM00172_.WMF", cAlternateFileName="")) returned 1
	[0054.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d0
	[0054.471] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.471] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ca8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HM00426_.WMF", cAlternateFileName="")) returned 1
	[0054.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d4
	[0054.472] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.472] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HTECH_01.MID", cAlternateFileName="")) returned 1
	[0054.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13d8
	[0054.472] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.472] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00046_.WMF", cAlternateFileName="")) returned 1
	[0054.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13dc
	[0054.473] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.473] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00118_.WMF", cAlternateFileName="")) returned 1
	[0054.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e0
	[0054.474] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.474] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00177_.WMF", cAlternateFileName="")) returned 1
	[0054.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e4
	[0054.475] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.475] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00204_.WMF", cAlternateFileName="")) returned 1
	[0054.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13e8
	[0054.475] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.476] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdfc2d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00233_.WMF", cAlternateFileName="")) returned 1
	[0054.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13ec
	[0054.476] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.476] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00343_.WMF", cAlternateFileName="")) returned 1
	[0054.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f0
	[0054.477] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.477] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00346_.WMF", cAlternateFileName="")) returned 1
	[0054.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f4
	[0054.575] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.575] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x788, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00351_.WMF", cAlternateFileName="")) returned 1
	[0054.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13f8
	[0054.575] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.576] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00557_.WMF", cAlternateFileName="")) returned 1
	[0054.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x13fc
	[0054.576] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.576] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00915_.WMF", cAlternateFileName="")) returned 1
	[0054.576] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1404
	[0054.577] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.577] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00919_.WMF", cAlternateFileName="")) returned 1
	[0054.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1408
	[0054.578] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.578] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00956_.WMF", cAlternateFileName="")) returned 1
	[0054.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x140c
	[0054.578] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.579] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IN00957_.WMF", cAlternateFileName="")) returned 1
	[0054.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1410
	[0054.579] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.579] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2178, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INDST_01.MID", cAlternateFileName="")) returned 1
	[0054.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1414
	[0054.580] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.580] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdfc2d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdfc2d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe00f20a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0075478.GIF", cAlternateFileName="")) returned 1
	[0054.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1418
	[0054.581] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.581] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2606, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086384.WMF", cAlternateFileName="")) returned 1
	[0054.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x141c
	[0054.581] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.581] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x257c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086420.WMF", cAlternateFileName="")) returned 1
	[0054.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1420
	[0054.582] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.582] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086424.WMF", cAlternateFileName="")) returned 1
	[0054.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1424
	[0054.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.583] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5516, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086426.WMF", cAlternateFileName="")) returned 1
	[0054.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428
	[0054.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.584] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a12, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086428.WMF", cAlternateFileName="")) returned 1
	[0054.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x142c
	[0054.584] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.584] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe00f20a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe00f20a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x829a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086432.WMF", cAlternateFileName="")) returned 1
	[0054.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1430
	[0054.585] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.585] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x375e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0086478.WMF", cAlternateFileName="")) returned 1
	[0054.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1434
	[0054.585] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.586] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0089945.WMF", cAlternateFileName="")) returned 1
	[0054.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1438
	[0054.586] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.586] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0089992.WMF", cAlternateFileName="")) returned 1
	[0054.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x143c
	[0054.587] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.587] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5314, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090027.WMF", cAlternateFileName="")) returned 1
	[0054.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1440
	[0054.588] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.588] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090087.WMF", cAlternateFileName="")) returned 1
	[0054.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1444
	[0054.588] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.589] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090089.WMF", cAlternateFileName="")) returned 1
	[0054.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1448
	[0054.589] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.589] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090149.WMF", cAlternateFileName="")) returned 1
	[0054.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x144c
	[0054.590] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.590] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090390.WMF", cAlternateFileName="")) returned 1
	[0054.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1450
	[0054.590] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.591] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090777.WMF", cAlternateFileName="")) returned 1
	[0054.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454
	[0054.591] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.591] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090779.WMF", cAlternateFileName="")) returned 1
	[0054.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1458
	[0054.592] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.592] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090781.WMF", cAlternateFileName="")) returned 1
	[0054.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x145c
	[0054.593] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.593] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b16, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0090783.WMF", cAlternateFileName="")) returned 1
	[0054.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1460
	[0054.593] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.594] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa442, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0093905.WMF", cAlternateFileName="")) returned 1
	[0054.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1464
	[0054.594] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.594] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe03547c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe03547c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe03547c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0098497.WMF", cAlternateFileName="")) returned 1
	[0054.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1468
	[0054.595] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.595] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60b7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099145.JPG", cAlternateFileName="")) returned 1
	[0054.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x146c
	[0054.596] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.596] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099146.WMF", cAlternateFileName="")) returned 1
	[0054.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1470
	[0054.597] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.597] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099147.JPG", cAlternateFileName="")) returned 1
	[0054.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1474
	[0054.597] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.598] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4752, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099148.JPG", cAlternateFileName="")) returned 1
	[0054.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1478
	[0054.598] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.598] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11dfe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099149.WMF", cAlternateFileName="")) returned 1
	[0054.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x147c
	[0054.599] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.599] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x559a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099150.JPG", cAlternateFileName="")) returned 1
	[0054.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1480
	[0054.601] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.601] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099151.WMF", cAlternateFileName="")) returned 1
	[0054.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1484
	[0054.601] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.602] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099152.JPG", cAlternateFileName="")) returned 1
	[0054.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1488
	[0054.602] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.602] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3632, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099153.WMF", cAlternateFileName="")) returned 1
	[0054.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x148c
	[0054.603] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.604] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe05b6d7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099154.JPG", cAlternateFileName="")) returned 1
	[0054.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1490
	[0054.604] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.604] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099155.JPG", cAlternateFileName="")) returned 1
	[0054.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1494
	[0054.605] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.605] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3682, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099156.JPG", cAlternateFileName="")) returned 1
	[0054.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1498
	[0054.606] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.606] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099157.JPG", cAlternateFileName="")) returned 1
	[0054.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x149c
	[0054.606] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.607] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6630, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099158.WMF", cAlternateFileName="")) returned 1
	[0054.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0
	[0054.607] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.607] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099159.WMF", cAlternateFileName="")) returned 1
	[0054.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a4
	[0054.608] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.608] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099160.JPG", cAlternateFileName="")) returned 1
	[0054.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a8
	[0054.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.609] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099161.JPG", cAlternateFileName="")) returned 1
	[0054.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ac
	[0054.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.610] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099162.JPG", cAlternateFileName="")) returned 1
	[0054.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b0
	[0054.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.610] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5754, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099163.WMF", cAlternateFileName="")) returned 1
	[0054.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b4
	[0054.611] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.611] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe05b6d7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe05b6d7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099164.WMF", cAlternateFileName="")) returned 1
	[0054.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14b8
	[0054.612] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.612] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc53a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099165.JPG", cAlternateFileName="")) returned 1
	[0054.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14bc
	[0054.613] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.613] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfcff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099166.JPG", cAlternateFileName="")) returned 1
	[0054.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c0
	[0054.613] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.614] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099167.JPG", cAlternateFileName="")) returned 1
	[0054.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c4
	[0054.614] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.614] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ed3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099168.JPG", cAlternateFileName="")) returned 1
	[0054.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14c8
	[0054.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.615] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099169.WMF", cAlternateFileName="")) returned 1
	[0054.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14cc
	[0054.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.616] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ee4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099170.WMF", cAlternateFileName="")) returned 1
	[0054.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d0
	[0054.617] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.617] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2232, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099171.WMF", cAlternateFileName="")) returned 1
	[0054.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d4
	[0054.617] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.618] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe392, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099172.WMF", cAlternateFileName="")) returned 1
	[0054.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14d8
	[0054.618] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.618] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9114, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099173.WMF", cAlternateFileName="")) returned 1
	[0054.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14dc
	[0054.742] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.742] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe081920, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe081920, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe081920, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1846, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099174.WMF", cAlternateFileName="")) returned 1
	[0054.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e0
	[0054.742] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.743] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2610, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099175.WMF", cAlternateFileName="")) returned 1
	[0054.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e4
	[0054.743] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.743] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099176.WMF", cAlternateFileName="")) returned 1
	[0054.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14e8
	[0054.744] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.745] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x150a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099177.WMF", cAlternateFileName="")) returned 1
	[0054.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14ec
	[0054.745] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.745] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe16, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099178.WMF", cAlternateFileName="")) returned 1
	[0054.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f0
	[0054.746] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.746] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099179.WMF", cAlternateFileName="")) returned 1
	[0054.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f4
	[0054.747] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099180.WMF", cAlternateFileName="")) returned 1
	[0054.747] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14f8
	[0054.747] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099181.WMF", cAlternateFileName="")) returned 1
	[0054.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14fc
	[0054.748] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099182.WMF", cAlternateFileName="")) returned 1
	[0054.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1500
	[0054.749] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.749] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1352, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099183.WMF", cAlternateFileName="")) returned 1
	[0054.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1504
	[0054.750] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.751] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099184.WMF", cAlternateFileName="")) returned 1
	[0054.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1508
	[0054.752] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.753] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099185.JPG", cAlternateFileName="")) returned 1
	[0054.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x150c
	[0054.753] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.753] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099186.JPG", cAlternateFileName="")) returned 1
	[0054.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1510
	[0054.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.754] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099187.JPG", cAlternateFileName="")) returned 1
	[0054.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1514
	[0054.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.755] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe18c9a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe18c9a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2378, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099188.JPG", cAlternateFileName="")) returned 1
	[0054.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1518
	[0054.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.756] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099189.JPG", cAlternateFileName="")) returned 1
	[0054.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x151c
	[0054.756] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.756] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099190.JPG", cAlternateFileName="")) returned 1
	[0054.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1520
	[0054.757] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.757] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf39f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099191.JPG", cAlternateFileName="")) returned 1
	[0054.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1524
	[0054.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.758] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe56c811, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099192.GIF", cAlternateFileName="")) returned 1
	[0054.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1528
	[0054.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.759] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe0a7b88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ada, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099193.GIF", cAlternateFileName="")) returned 1
	[0054.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x152c
	[0054.759] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.760] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe0a7b88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe0a7b88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe18c9a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099194.GIF", cAlternateFileName="")) returned 1
	[0054.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1530
	[0054.761] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.761] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4dd3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099195.GIF", cAlternateFileName="")) returned 1
	[0054.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1534
	[0054.762] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.762] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3801, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099196.GIF", cAlternateFileName="")) returned 1
	[0054.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1538
	[0054.763] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.763] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a92, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099197.GIF", cAlternateFileName="")) returned 1
	[0054.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x153c
	[0054.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.764] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099198.GIF", cAlternateFileName="")) returned 1
	[0054.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1540
	[0054.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.764] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84b7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099199.GIF", cAlternateFileName="")) returned 1
	[0054.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1544
	[0054.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.765] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099200.GIF", cAlternateFileName="")) returned 1
	[0054.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1548
	[0054.766] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.766] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099201.GIF", cAlternateFileName="")) returned 1
	[0054.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x154c
	[0054.767] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.767] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1367, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099202.GIF", cAlternateFileName="")) returned 1
	[0054.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1550
	[0054.767] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.767] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099203.GIF", cAlternateFileName="")) returned 1
	[0054.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1554
	[0054.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.768] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56c811, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe56c811, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099204.WMF", cAlternateFileName="")) returned 1
	[0054.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1558
	[0054.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.769] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0099205.WMF", cAlternateFileName="")) returned 1
	[0054.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x155c
	[0054.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.770] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101856.BMP", cAlternateFileName="")) returned 1
	[0054.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1560
	[0054.771] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.771] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101857.BMP", cAlternateFileName="")) returned 1
	[0054.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1564
	[0054.771] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.772] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101858.BMP", cAlternateFileName="")) returned 1
	[0054.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1568
	[0054.772] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.772] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101859.BMP", cAlternateFileName="")) returned 1
	[0054.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x156c
	[0054.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.773] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe59294b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101860.BMP", cAlternateFileName="")) returned 1
	[0054.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1570
	[0054.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.774] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101861.BMP", cAlternateFileName="")) returned 1
	[0054.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1574
	[0054.774] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.775] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101862.BMP", cAlternateFileName="")) returned 1
	[0054.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1578
	[0054.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.875] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101863.BMP", cAlternateFileName="")) returned 1
	[0054.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x157c
	[0054.875] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.875] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59294b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe59294b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe5dee50, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101864.BMP", cAlternateFileName="")) returned 1
	[0054.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1580
	[0054.876] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.876] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101865.BMP", cAlternateFileName="")) returned 1
	[0054.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1584
	[0054.877] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.877] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101866.BMP", cAlternateFileName="")) returned 1
	[0054.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1588
	[0054.878] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.878] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101867.BMP", cAlternateFileName="")) returned 1
	[0054.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x158c
	[0054.878] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.878] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0101980.WMF", cAlternateFileName="")) returned 1
	[0054.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1590
	[0054.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.880] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0102002.WMF", cAlternateFileName="")) returned 1
	[0054.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1594
	[0054.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.881] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6978, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0102594.WMF", cAlternateFileName="")) returned 1
	[0054.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1598
	[0054.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.882] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0102762.WMF", cAlternateFileName="")) returned 1
	[0054.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x159c
	[0054.882] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.882] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4290, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0102984.WMF", cAlternateFileName="")) returned 1
	[0054.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a0
	[0054.883] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.883] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0103058.WMF", cAlternateFileName="")) returned 1
	[0054.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a4
	[0054.883] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.884] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dee50, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe5dee50, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe605048, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3264, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0103262.WMF", cAlternateFileName="")) returned 1
	[0054.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15a8
	[0054.884] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.884] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62b2d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe62b2d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0103402.WMF", cAlternateFileName="")) returned 1
	[0054.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15ac
	[0054.885] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.885] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1714, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0103812.WMF", cAlternateFileName="")) returned 1
	[0054.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b0
	[0054.886] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.886] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0103850.WMF", cAlternateFileName="")) returned 1
	[0054.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b4
	[0054.887] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.887] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1434, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0105230.WMF", cAlternateFileName="")) returned 1
	[0054.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0054.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15b8
	[0054.888] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0054.888] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe605048, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe605048, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe62b2d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0105232.WMF", cAlternateFileName="")) returned 1
	[0057.545] SetLastError (dwErrCode=0x0) 
	[0057.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.548] GetLastError () returned 0x5
	[0057.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0057.548] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0057.548] SetLastError (dwErrCode=0x0) 
	[0057.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.548] GetLastError () returned 0x5
	[0057.548] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0057.549] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0057.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0057.549] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.549] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1
	[0057.549] SetLastError (dwErrCode=0x0) 
	[0057.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.550] GetLastError () returned 0x5
	[0057.550] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0057.550] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0057.550] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0057.551] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0057.551] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1
	[0057.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcf160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x281c
	[0057.553] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.554] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1
	[0057.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2820
	[0057.554] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.555] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1
	[0057.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd5f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2824
	[0057.555] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.556] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1
	[0057.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd95d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2828
	[0057.557] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.557] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1
	[0057.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ddcca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x282c
	[0057.558] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.558] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1
	[0057.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de0370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2830
	[0057.559] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.559] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1
	[0057.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de3a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2834
	[0057.560] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.560] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1
	[0057.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de7110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2838
	[0057.561] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.561] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1
	[0057.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dea7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x283c
	[0057.561] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.562] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1
	[0057.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dedeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2840
	[0057.562] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.563] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1
	[0057.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df1580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2844
	[0057.563] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.563] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1
	[0057.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df4c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2848
	[0057.564] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.564] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1
	[0057.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df8320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x284c
	[0057.565] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.565] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1
	[0057.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dfb9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2850
	[0057.566] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.566] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1
	[0057.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dff0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2854
	[0057.567] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.567] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1
	[0057.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e02790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2858
	[0057.568] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.568] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1
	[0057.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e05e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x285c
	[0057.569] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.569] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1
	[0057.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e09530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2860
	[0057.570] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.570] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1
	[0057.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e0cc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2864
	[0057.570] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.571] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1
	[0057.571] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e102d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2868
	[0057.571] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.572] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1
	[0057.572] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e139a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x286c
	[0057.572] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.573] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1
	[0057.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e17070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2870
	[0057.573] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.574] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1
	[0057.574] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e1a740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2874
	[0057.577] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.577] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1
	[0057.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e1de10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2878
	[0057.578] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.578] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1
	[0057.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e214e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x287c
	[0057.579] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.579] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1
	[0057.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e24bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2880
	[0057.580] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.580] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1
	[0057.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e28280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2884
	[0057.581] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.581] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1113bba3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1
	[0057.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e2b950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2888
	[0057.582] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.582] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1
	[0057.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e2f020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288c
	[0057.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.583] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1
	[0057.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e326f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2890
	[0057.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.584] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1
	[0057.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e35dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2894
	[0057.584] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.585] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1
	[0057.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e39490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2898
	[0057.585] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.586] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1
	[0057.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e3cb60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x289c
	[0057.586] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0057.587] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1
	[0057.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0057.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e40230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a0
	[0057.587] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.187] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0
	[0058.187] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0058.188] SetLastError (dwErrCode=0x0) 
	[0058.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.189] GetLastError () returned 0x5
	[0058.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0058.189] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.189] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0
	[0058.189] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0058.189] SetLastError (dwErrCode=0x0) 
	[0058.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.190] GetLastError () returned 0x5
	[0058.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.190] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.190] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0058.190] FindClose (in: hFindFile=0x274bd1fbfb0 | out: hFindFile=0x274bd1fbfb0) returned 1
	[0058.190] SetLastError (dwErrCode=0x0) 
	[0058.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.190] GetLastError () returned 0x5
	[0058.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.190] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.190] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0058.190] SetLastError (dwErrCode=0x0) 
	[0058.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.190] GetLastError () returned 0x5
	[0058.190] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.190] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.190] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0058.191] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.191] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1
	[0058.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c
	[0058.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.192] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Integral.thmx", cAlternateFileName="INTEGR~1.THM")) returned 1
	[0058.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2818
	[0058.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.193] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Ion Boardroom.thmx", cAlternateFileName="IONBOA~1.THM")) returned 1
	[0058.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a4
	[0058.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.193] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Ion.thmx", cAlternateFileName="ION~1.THM")) returned 1
	[0058.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28a8
	[0058.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.194] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office Theme.thmx", cAlternateFileName="OFFICE~1.THM")) returned 1
	[0058.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ac
	[0058.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.195] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Organic.thmx", cAlternateFileName="ORGANI~1.THM")) returned 1
	[0058.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b0
	[0058.195] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.196] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Retrospect.thmx", cAlternateFileName="RETROS~1.THM")) returned 1
	[0058.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b4
	[0058.196] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.197] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Slice.thmx", cAlternateFileName="SLICE~1.THM")) returned 1
	[0058.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28b8
	[0058.197] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1
	[0058.198] SetLastError (dwErrCode=0x0) 
	[0058.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.198] GetLastError () returned 0x5
	[0058.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.198] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0058.201] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.201] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1
	[0058.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c0
	[0058.202] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.202] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Blue Green.xml", cAlternateFileName="BLUEGR~1.XML")) returned 1
	[0058.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c4
	[0058.203] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.203] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Blue II.xml", cAlternateFileName="BLUEII~1.XML")) returned 1
	[0058.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c8
	[0058.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.204] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Blue Warm.xml", cAlternateFileName="BLUEWA~1.XML")) returned 1
	[0058.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28cc
	[0058.205] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.205] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Blue.xml", cAlternateFileName="")) returned 1
	[0058.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d0
	[0058.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.206] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1
	[0058.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d4
	[0058.207] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.207] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Green Yellow.xml", cAlternateFileName="GREENY~1.XML")) returned 1
	[0058.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28d8
	[0058.208] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.208] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Green.xml", cAlternateFileName="")) returned 1
	[0058.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28dc
	[0058.209] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.209] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Marquee.xml", cAlternateFileName="")) returned 1
	[0058.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e0
	[0058.210] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.210] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Median.xml", cAlternateFileName="")) returned 1
	[0058.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e4
	[0058.211] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.211] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0058.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28e8
	[0058.212] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.212] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Orange Red.xml", cAlternateFileName="ORANGE~1.XML")) returned 1
	[0058.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28ec
	[0058.215] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Orange.xml", cAlternateFileName="")) returned 1
	[0058.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f0
	[0058.216] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.216] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Paper.xml", cAlternateFileName="")) returned 1
	[0058.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f4
	[0058.217] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.217] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Red Orange.xml", cAlternateFileName="REDORA~1.XML")) returned 1
	[0058.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28f8
	[0058.218] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.218] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Red Violet.xml", cAlternateFileName="REDVIO~1.XML")) returned 1
	[0058.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28fc
	[0058.218] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.219] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Red.xml", cAlternateFileName="")) returned 1
	[0058.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2900
	[0058.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.219] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1
	[0058.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2904
	[0058.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.220] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Violet II.xml", cAlternateFileName="VIOLET~1.XML")) returned 1
	[0058.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2908
	[0058.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.221] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Violet.xml", cAlternateFileName="")) returned 1
	[0058.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290c
	[0058.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.222] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Yellow Orange.xml", cAlternateFileName="YELLOW~1.XML")) returned 1
	[0058.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2910
	[0058.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Yellow.xml", cAlternateFileName="")) returned 1
	[0058.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2914
	[0058.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.224] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Yellow.xml", cAlternateFileName="")) returned 0
	[0058.224] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0058.225] SetLastError (dwErrCode=0x0) 
	[0058.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.229] GetLastError () returned 0x5
	[0058.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.229] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.229] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0058.229] SetLastError (dwErrCode=0x0) 
	[0058.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.229] GetLastError () returned 0x5
	[0058.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.229] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0058.231] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.232] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaeb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Banded Edge.eftx", cAlternateFileName="BANDED~1.EFT")) returned 1
	[0058.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2918
	[0058.232] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.233] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Extreme Shadow.eftx", cAlternateFileName="EXTREM~1.EFT")) returned 1
	[0058.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x291c
	[0058.233] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.234] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51933, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Frosted Glass.eftx", cAlternateFileName="FROSTE~1.EFT")) returned 1
	[0058.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2920
	[0058.234] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.235] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51cbe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Glossy.eftx", cAlternateFileName="GLOSSY~1.EFT")) returned 1
	[0058.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2924
	[0058.235] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.236] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd44b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Glow Edge.eftx", cAlternateFileName="GLOWED~1.EFT")) returned 1
	[0058.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2928
	[0058.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.236] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56208, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Grunge Texture.eftx", cAlternateFileName="GRUNGE~1.EFT")) returned 1
	[0058.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x292c
	[0058.237] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.237] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Inset.eftx", cAlternateFileName="INSET~1.EFT")) returned 1
	[0058.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2930
	[0058.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.238] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb543, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Milk Glass.eftx", cAlternateFileName="MILKGL~1.EFT")) returned 1
	[0058.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2934
	[0058.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.239] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office 2007 - 2010.eftx", cAlternateFileName="OFFICE~1.EFT")) returned 1
	[0058.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2938
	[0058.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.240] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Reflection.eftx", cAlternateFileName="REFLEC~1.EFT")) returned 1
	[0058.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x293c
	[0058.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.241] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Riblet.eftx", cAlternateFileName="RIBLET~1.EFT")) returned 1
	[0058.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2940
	[0058.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.241] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d753, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Smokey Glass.eftx", cAlternateFileName="SMOKEY~1.EFT")) returned 1
	[0058.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2944
	[0058.242] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.242] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb17b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Subtle Solids.eftx", cAlternateFileName="SUBTLE~1.EFT")) returned 1
	[0058.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2948
	[0058.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.243] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 1
	[0058.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294c
	[0058.244] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.244] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 0
	[0058.245] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0058.246] SetLastError (dwErrCode=0x0) 
	[0058.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.248] GetLastError () returned 0x5
	[0058.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.248] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.248] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0058.248] SetLastError (dwErrCode=0x0) 
	[0058.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.248] GetLastError () returned 0x5
	[0058.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.248] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0058.250] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.251] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Arial Black-Arial.xml", cAlternateFileName="ARIALB~1.XML")) returned 1
	[0058.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2950
	[0058.251] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.252] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Arial-Times New Roman.xml", cAlternateFileName="ARIAL-~1.XML")) returned 1
	[0058.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2954
	[0058.252] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.253] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Arial.xml", cAlternateFileName="")) returned 1
	[0058.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2958
	[0058.253] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.253] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Calibri Light-Constantia.xml", cAlternateFileName="CALIBR~1.XML")) returned 1
	[0058.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x295c
	[0058.254] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.254] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Calibri-Cambria.xml", cAlternateFileName="CALIBR~2.XML")) returned 1
	[0058.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2960
	[0058.255] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.255] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Calibri.xml", cAlternateFileName="")) returned 1
	[0058.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2964
	[0058.256] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.256] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Cambria.xml", cAlternateFileName="")) returned 1
	[0058.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2968
	[0058.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.257] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Candara.xml", cAlternateFileName="")) returned 1
	[0058.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x296c
	[0058.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.258] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Century Gothic-Palatino Linotype.xml", cAlternateFileName="CENTUR~3.XML")) returned 1
	[0058.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2970
	[0058.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.259] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Century Gothic.xml", cAlternateFileName="CENTUR~2.XML")) returned 1
	[0058.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2974
	[0058.259] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.260] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Century Schoolbook.xml", cAlternateFileName="CENTUR~1.XML")) returned 1
	[0058.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2978
	[0058.260] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.261] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Consolas-Verdana.xml", cAlternateFileName="CONSOL~1.XML")) returned 1
	[0058.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x297c
	[0058.261] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.261] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Constantia-Franklin Gothic Book.xml", cAlternateFileName="CONSTA~1.XML")) returned 1
	[0058.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2980
	[0058.262] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.262] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Corbel.xml", cAlternateFileName="")) returned 1
	[0058.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2984
	[0058.263] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.263] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Franklin Gothic.xml", cAlternateFileName="FRANKL~1.XML")) returned 1
	[0058.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2988
	[0058.264] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.264] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Garamond-TrebuchetMs.xml", cAlternateFileName="GARAMO~1.XML")) returned 1
	[0058.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298c
	[0058.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.265] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Garamond.xml", cAlternateFileName="")) returned 1
	[0058.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2990
	[0058.266] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.266] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Georgia.xml", cAlternateFileName="")) returned 1
	[0058.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2994
	[0058.266] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.267] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Gill Sans MT.xml", cAlternateFileName="GILLSA~1.XML")) returned 1
	[0058.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2998
	[0058.267] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.268] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe35, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0058.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x299c
	[0058.268] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.269] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Times New Roman-Arial.xml", cAlternateFileName="TIMESN~1.XML")) returned 1
	[0058.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a0
	[0058.269] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.270] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TrebuchetMs.xml", cAlternateFileName="TREBUC~1.XML")) returned 1
	[0058.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a4
	[0058.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.271] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tw Cen MT-Rockwell.xml", cAlternateFileName="TWCENM~2.XML")) returned 1
	[0058.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6f2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29a8
	[0058.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.272] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 1
	[0058.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d72970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ac
	[0058.272] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.273] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 0
	[0058.273] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0058.273] SetLastError (dwErrCode=0x0) 
	[0058.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.276] GetLastError () returned 0x5
	[0058.276] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0058.276] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.276] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1
	[0058.276] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d76040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28bc
	[0058.277] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.277] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 0
	[0058.277] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0058.277] SetLastError (dwErrCode=0x0) 
	[0058.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.277] GetLastError () returned 0x5
	[0058.277] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.277] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.277] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0058.277] SetLastError (dwErrCode=0x0) 
	[0058.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.277] GetLastError () returned 0x5
	[0058.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.278] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0058.278] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.278] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0058.278] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0058.278] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdee689, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdee689, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7667bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7667bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34d6ecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf34d6ecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f6d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5ed8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVOpcServices.dll", cAlternateFileName="APPVOP~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVOpcServices.dll.manifest", cAlternateFileName="APPVOP~1.MAN")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVPackaging.dll", cAlternateFileName="APPVPA~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVPackaging.dll.manifest", cAlternateFileName="APPVPA~1.MAN")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48a9e4d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48a9e4d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48cfa7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f8d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVStreamMap.dll", cAlternateFileName="APPVST~1.DLL")) returned 1
	[0058.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114f5747, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommonSequencingProperties.xml", cAlternateFileName="COMMON~1.XML")) returned 1
	[0058.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d79710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b0
	[0058.280] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.280] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0058.280] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6d5947, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Flattener.exe", cAlternateFileName="FLATTE~1.EXE")) returned 1
	[0058.280] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Flattener.exe.config", cAlternateFileName="FLATTE~1.CON")) returned 1
	[0058.280] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AppV.Eventing.dll", cAlternateFileName="MI9EC4~1.DLL")) returned 1
	[0058.280] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AppV.Modernizer.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58cd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AppV.Modernizer.CSharp.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6924d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AppV.Modernizer.ManagedCpp.dll", cAlternateFileName="MI5FC8~1.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Tools.BinaryStore.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Tools.Office.C2R.Common.dll", cAlternateFileName="MI509C~1.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x206c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Tools.Office.C2R.Packager.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2cf9c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0058.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0058.281] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0058.282] SetLastError (dwErrCode=0x0) 
	[0058.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.283] GetLastError () returned 0x5
	[0058.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.283] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.284] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fre", cAlternateFileName="")) returned 1
	[0058.284] SetLastError (dwErrCode=0x0) 
	[0058.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.284] GetLastError () returned 0x5
	[0058.284] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.284] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.284] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0058.285] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.285] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win10.mp4", cAlternateFileName="STARTM~2.MP4")) returned 1
	[0058.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.286] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d7cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b4
	[0058.286] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.286] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11567da2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11567da2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce1b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win10_RTL.mp4", cAlternateFileName="STARTM~1.MP4")) returned 1
	[0058.286] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d804b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29b8
	[0058.287] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.287] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7600b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win7.wmv", cAlternateFileName="STARTM~2.WMV")) returned 1
	[0058.287] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d83b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29bc
	[0058.288] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.288] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8b14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win7_RTL.wmv", cAlternateFileName="STARTM~1.WMV")) returned 1
	[0058.288] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d87250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c0
	[0058.289] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.289] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19768, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win8.mp4", cAlternateFileName="STARTM~4.MP4")) returned 1
	[0058.289] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c4
	[0058.293] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.294] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 1
	[0058.294] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8dff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29c8
	[0058.295] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.295] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 0
	[0058.295] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0058.296] SetLastError (dwErrCode=0x0) 
	[0058.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.298] GetLastError () returned 0x5
	[0058.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.298] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.298] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0058.298] SetLastError (dwErrCode=0x0) 
	[0058.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.298] GetLastError () returned 0x5
	[0058.298] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.298] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.298] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0058.300] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.309] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3607185, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc61000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RInt.16.msi", cAlternateFileName="C2RINT~1.MSI")) returned 1
	[0058.309] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d916c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29cc
	[0058.310] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.310] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3acbcd3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RIntLoc.en-us.16.msi", cAlternateFileName="C2RINT~2.MSI")) returned 1
	[0058.310] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d94d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d0
	[0058.311] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.311] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1
	[0058.311] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d98460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d4
	[0058.312] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.312] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1
	[0058.312] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29d8
	[0058.313] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.313] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1
	[0058.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29dc
	[0058.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.314] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1
	[0058.314] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da28d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e0
	[0058.315] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.315] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2dfa2a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2dfa2a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1
	[0058.315] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da5fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e4
	[0058.316] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.316] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1
	[0058.316] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29e8
	[0058.317] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.317] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1
	[0058.317] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29ec
	[0058.318] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.318] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1
	[0058.318] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db0410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f0
	[0058.319] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.319] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1
	[0058.319] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db3ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f4
	[0058.320] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.320] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1
	[0058.320] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db71b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29f8
	[0058.321] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.321] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1
	[0058.321] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dba880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x29fc
	[0058.691] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.691] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1
	[0058.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a00
	[0058.692] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.692] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1
	[0058.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a04
	[0058.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.693] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1
	[0058.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a08
	[0058.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.694] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1
	[0058.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a0c
	[0058.694] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.694] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1
	[0058.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a10
	[0058.695] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.695] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1
	[0058.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a14
	[0058.696] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.696] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1
	[0058.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a18
	[0058.696] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.697] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3593a88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3593a88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1
	[0058.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a1c
	[0058.697] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.697] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1
	[0058.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a20
	[0058.698] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.698] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1
	[0058.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a24
	[0058.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.699] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1
	[0058.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a28
	[0058.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.700] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1
	[0058.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a2c
	[0058.700] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.700] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1
	[0058.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a30
	[0058.701] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.701] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1
	[0058.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a34
	[0058.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.702] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1
	[0058.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a38
	[0058.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.703] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1
	[0058.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a3c
	[0058.703] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.703] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b2abe77, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1
	[0058.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a40
	[0058.704] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.704] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1
	[0058.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a44
	[0058.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.705] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36eafd9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36eafd9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1
	[0058.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a48
	[0058.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.706] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd38424c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd38424c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1
	[0058.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4c
	[0058.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.706] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1
	[0058.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a50
	[0058.707] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.707] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1
	[0058.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a54
	[0058.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.708] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd362c40f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd362c40f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C26B0A~1.XML")) returned 1
	[0058.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a58
	[0058.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.709] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd28c2fa3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd28c2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2A7B5~1.XML")) returned 1
	[0058.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a5c
	[0058.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.709] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1
	[0058.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a60
	[0058.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.710] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1
	[0058.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a64
	[0058.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.711] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C29B2F~1.XML")) returned 1
	[0058.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a68
	[0058.712] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.712] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd39e5e8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd39e5e8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2EB7A~1.XML")) returned 1
	[0058.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a6c
	[0058.712] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.713] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1
	[0058.713] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e22a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneDriveSetup.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1
	[0058.713] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef3b8917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef3b8917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef4774a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QFE31927.msp", cAlternateFileName="")) returned 1
	[0058.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a70
	[0058.714] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.714] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef109ec5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QFE31928.msp", cAlternateFileName="")) returned 1
	[0058.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a74
	[0058.715] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.715] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd44a0845, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd44a0845, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd455f44d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0e000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPPRedist.msi", cAlternateFileName="SPPRED~1.MSI")) returned 1
	[0058.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a78
	[0058.716] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfa976, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97da2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WI4D05~1.MSU")) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14902e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows8-RT-KB2999226-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96388, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows8-RT-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2d1d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows8.1-KB2999226-x64.msu", cAlternateFileName="WI2C39~1.MSU")) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0058.716] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 0
	[0058.716] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0058.717] SetLastError (dwErrCode=0x0) 
	[0058.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.719] GetLastError () returned 0x5
	[0058.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.719] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.719] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0058.719] SetLastError (dwErrCode=0x0) 
	[0058.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.719] GetLastError () returned 0x5
	[0058.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0058.719] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0058.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0058.722] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0058.726] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2910498, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5127, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Grace-ppd.xrm-ms", cAlternateFileName="ACCESS~3.XRM")) returned 1
	[0058.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a7c
	[0058.727] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.728] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe289dd92, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Grace-ul-oob.xrm-ms", cAlternateFileName="ACCESS~2.XRM")) returned 1
	[0058.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a80
	[0058.729] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.729] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28c3fe1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="ACCESS~1.XRM")) returned 1
	[0058.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a84
	[0058.730] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.730] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d3c6cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d3c6cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f5281c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="AC6D20~1.XRM")) returned 1
	[0058.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a88
	[0058.730] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.731] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f06362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="AC1492~1.XRM")) returned 1
	[0058.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8c
	[0058.731] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.732] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f9ecf2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ddc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="ACAD72~1.XRM")) returned 1
	[0058.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a90
	[0058.732] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.732] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d88bc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2987, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Retail-pl.xrm-ms", cAlternateFileName="AC7E42~1.XRM")) returned 1
	[0058.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a94
	[0058.733] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.733] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29cf0c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29cf0c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d16476, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Retail-ppd.xrm-ms", cAlternateFileName="AC6686~1.XRM")) returned 1
	[0058.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a98
	[0058.734] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.734] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29366eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29366eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29cf0c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Retail-ul-oob.xrm-ms", cAlternateFileName="ACCESS~4.XRM")) returned 1
	[0058.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a9c
	[0058.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.735] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2dd500f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Retail-ul-phn.xrm-ms", cAlternateFileName="ACAF89~1.XRM")) returned 1
	[0058.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa0
	[0058.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.736] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29a8e16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29a8e16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2cf0288, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b87, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Trial-pl.xrm-ms", cAlternateFileName="AC69E2~1.XRM")) returned 1
	[0058.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa4
	[0058.736] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.737] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2982ba2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2982ba2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2b72a71, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51a5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Trial-ppd.xrm-ms", cAlternateFileName="AC7797~1.XRM")) returned 1
	[0058.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aa8
	[0058.737] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.737] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe295c968, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe295c968, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2a1b5af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessR_Trial-ul-oob.xrm-ms", cAlternateFileName="AC031B~1.XRM")) returned 1
	[0058.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aac
	[0058.738] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.738] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe318eac3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe318eac3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3299b47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a8a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="AC225E~1.XRM")) returned 1
	[0058.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab0
	[0058.739] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.739] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe32738ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe32738ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe337e9fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="AC86E0~1.XRM")) returned 1
	[0058.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab4
	[0058.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.740] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe303760d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe303760d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3201264, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2586, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_KMS_Client-ul.xrm-ms", cAlternateFileName="AC4FC4~1.XRM")) returned 1
	[0058.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ab8
	[0058.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.741] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe318eac3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe318eac3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3299b47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_MAK-pl.xrm-ms", cAlternateFileName="AC3BFD~1.XRM")) returned 1
	[0058.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2abc
	[0058.741] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.741] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe30113f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe30113f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe31db01c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a49, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_MAK-ppd.xrm-ms", cAlternateFileName="ACF0DC~1.XRM")) returned 1
	[0058.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac0
	[0058.742] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.742] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2daee42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2daee42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe30113f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_MAK-ul-oob.xrm-ms", cAlternateFileName="AC2E1B~1.XRM")) returned 1
	[0058.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac4
	[0058.743] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.743] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2fc4ef7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2fc4ef7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe318eac3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessVL_MAK-ul-phn.xrm-ms", cAlternateFileName="ACEEE9~1.XRM")) returned 1
	[0058.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac8
	[0058.744] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.979] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2fc4ef7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2fc4ef7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe324d6a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client-issuance-bridge-office.xrm-ms", cAlternateFileName="CL0848~1.XRM")) returned 1
	[0058.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2acc
	[0058.980] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.980] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe28ea227, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe28ea227, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2982ba2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client-issuance-root-bridge-test.xrm-ms", cAlternateFileName="CL284D~1.XRM")) returned 1
	[0058.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad0
	[0058.981] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.981] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe28c3fe1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe28c3fe1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe295c968, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc1f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client-issuance-root.xrm-ms", cAlternateFileName="CLIENT~4.XRM")) returned 1
	[0058.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad4
	[0058.981] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.982] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe289dd92, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe289dd92, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29366eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client-issuance-stil.xrm-ms", cAlternateFileName="CLIENT~3.XRM")) returned 1
	[0058.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ad8
	[0058.982] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.982] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28ea227, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1128, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client-issuance-ul-oob.xrm-ms", cAlternateFileName="CLIENT~2.XRM")) returned 1
	[0058.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2adc
	[0058.983] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.983] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2687c83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe282b673, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="client-issuance-ul.xrm-ms", cAlternateFileName="CLIENT~1.XRM")) returned 1
	[0058.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae0
	[0058.983] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.984] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2f2c57f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2f2c57f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe305d884, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5169, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Grace-ppd.xrm-ms", cAlternateFileName="EXCELR~3.XRM")) returned 1
	[0058.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae4
	[0058.991] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.991] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2f2c57f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2f2c57f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe314269a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d45, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Grace-ul-oob.xrm-ms", cAlternateFileName="EXCELR~2.XRM")) returned 1
	[0058.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ae8
	[0058.991] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.992] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2dd500f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2dd500f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2feb0e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_OEM_Perp-pl.xrm-ms", cAlternateFileName="EXCELR~1.XRM")) returned 1
	[0058.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2aec
	[0058.992] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.992] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34fc158, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34fc158, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe38697b8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x516e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="EX46CD~1.XRM")) returned 1
	[0058.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af0
	[0058.993] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.993] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3594a6c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3594a6c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3a595e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="EX3475~1.XRM")) returned 1
	[0058.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0058.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af4
	[0058.993] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0058.994] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3332528, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3332528, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34afc59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="EXD89F~1.XRM")) returned 1
	[0058.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2af8
	[0059.026] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.026] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34172f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2983, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Retail-pl.xrm-ms", cAlternateFileName="EX3998~1.XRM")) returned 1
	[0059.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2afc
	[0059.027] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.027] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe35223c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x516c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Retail-ppd.xrm-ms", cAlternateFileName="EX788A~1.XRM")) returned 1
	[0059.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b00
	[0059.028] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.028] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3299b47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3299b47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3358711, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Retail-ul-oob.xrm-ms", cAlternateFileName="EX9957~1.XRM")) returned 1
	[0059.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b04
	[0059.028] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.029] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3201264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe32e60a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Retail-ul-phn.xrm-ms", cAlternateFileName="EXCELR~4.XRM")) returned 1
	[0059.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b08
	[0059.029] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.029] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec691f40, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Trial-pl.xrm-ms", cAlternateFileName="EXA577~1.XRM")) returned 1
	[0059.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0c
	[0059.030] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.030] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3299b47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3299b47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe330c311, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51e7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Trial-ppd.xrm-ms", cAlternateFileName="EX4CA4~1.XRM")) returned 1
	[0059.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b10
	[0059.030] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.031] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe337e9fc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe337e9fc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelR_Trial-ul-oob.xrm-ms", cAlternateFileName="EXB3BA~1.XRM")) returned 1
	[0059.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b14
	[0059.031] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.031] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34172f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34172f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe35485e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="EXCELV~1.XRM")) returned 1
	[0059.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b18
	[0059.032] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.032] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec750afb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec750afb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec7e944d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="EX0778~1.XRM")) returned 1
	[0059.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b1c
	[0059.033] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.033] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3af1fe3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3af1fe3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bd6df0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2581, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_KMS_Client-ul.xrm-ms", cAlternateFileName="EXCDB8~1.XRM")) returned 1
	[0059.033] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b20
	[0059.033] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.034] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3aa5b3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3aa5b3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b8a961, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_MAK-pl.xrm-ms", cAlternateFileName="EXCELV~4.XRM")) returned 1
	[0059.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b24
	[0059.034] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.034] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3aa5b3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3aa5b3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bb0ba1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a8b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_MAK-ppd.xrm-ms", cAlternateFileName="EXCELV~3.XRM")) returned 1
	[0059.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b28
	[0059.035] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.035] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3a0d1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3a0d1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b181c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_MAK-ul-oob.xrm-ms", cAlternateFileName="EXCELV~2.XRM")) returned 1
	[0059.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b2c
	[0059.036] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.036] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bb0ba1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bb0ba1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c494f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelVL_MAK-ul-phn.xrm-ms", cAlternateFileName="EX3B3E~1.XRM")) returned 1
	[0059.036] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b30
	[0059.036] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c9598b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c9598b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d7a82a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bd3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="HOB5CE~1.XRM")) returned 1
	[0059.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b34
	[0059.037] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3cbbc0c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3cbbc0c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3da0a82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="HO90F4~1.XRM")) returned 1
	[0059.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b38
	[0059.038] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.038] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c494f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c494f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d080f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="HODAE7~1.XRM")) returned 1
	[0059.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b3c
	[0059.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.039] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3a0d1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3a0d1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b646e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x559d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessPipcR_Grace-ppd.xrm-ms", cAlternateFileName="HOMEBU~1.XRM")) returned 1
	[0059.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b40
	[0059.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.040] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee37a832, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessPipcR_Grace-ul-oob.xrm-ms", cAlternateFileName="HOC1AF~1.XRM")) returned 1
	[0059.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b44
	[0059.040] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.040] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec691f40, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec691f40, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec750afb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29b7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HO4E4E~1.XRM")) returned 1
	[0059.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b48
	[0059.041] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee4131cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HOCD27~1.XRM")) returned 1
	[0059.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4c
	[0059.050] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.050] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3ef7f7a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3ef7f7a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3fdcd93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d75, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HO30DA~1.XRM")) returned 1
	[0059.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b50
	[0059.051] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.051] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3dc6c97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3dc6c97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3eaba33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e0e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HODC3A~1.XRM")) returned 1
	[0059.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b54
	[0059.052] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.052] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c6f733, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c6f733, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d2e398, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5611, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Grace-ppd.xrm-ms", cAlternateFileName="HOA2C7~1.XRM")) returned 1
	[0059.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b58
	[0059.053] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.053] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b8a961, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b8a961, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c6f733, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Grace-ul-oob.xrm-ms", cAlternateFileName="HOMEBU~2.XRM")) returned 1
	[0059.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b5c
	[0059.053] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.054] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c494f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c494f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3dc6c97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HO936B~1.XRM")) returned 1
	[0059.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b60
	[0059.054] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.054] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bd6df0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bd6df0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3cbbc0c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HOMEBU~4.XRM")) returned 1
	[0059.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b64
	[0059.055] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.055] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bd6df0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bd6df0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c9598b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d61, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HO620E~1.XRM")) returned 1
	[0059.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b68
	[0059.056] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.056] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b8a961, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b8a961, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c232ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HOMEBU~3.XRM")) returned 1
	[0059.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b6c
	[0059.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.125] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3ed1ce3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3ed1ce3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3fb6b6c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp2-pl.xrm-ms", cAlternateFileName="HO2C67~1.XRM")) returned 1
	[0059.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b70
	[0059.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.126] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3eaba33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3eaba33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3f6a648, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp2-ppd.xrm-ms", cAlternateFileName="HO3D7E~1.XRM")) returned 1
	[0059.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b74
	[0059.126] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.126] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3e5f5e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3e5f5e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3f1e1f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", cAlternateFileName="HO4CF9~1.XRM")) returned 1
	[0059.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b78
	[0059.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.127] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40756e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40756e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe415a524, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", cAlternateFileName="HOFD0F~1.XRM")) returned 1
	[0059.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b7c
	[0059.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.128] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3e393c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3e393c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3ef7f7a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp3-pl.xrm-ms", cAlternateFileName="HO5093~1.XRM")) returned 1
	[0059.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b80
	[0059.128] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.128] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3d2e398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3d2e398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3e393c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp3-ppd.xrm-ms", cAlternateFileName="HO0707~1.XRM")) returned 1
	[0059.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b84
	[0059.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.129] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3decec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3decec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3ed1ce3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", cAlternateFileName="HO1457~1.XRM")) returned 1
	[0059.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b88
	[0059.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.130] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3da0a82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3da0a82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3e5f5e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", cAlternateFileName="HOD2EE~1.XRM")) returned 1
	[0059.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b8c
	[0059.130] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.130] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3da0a82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3da0a82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40756e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp4-pl.xrm-ms", cAlternateFileName="HO8B40~1.XRM")) returned 1
	[0059.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b90
	[0059.131] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.131] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3d2e398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3d2e398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3decec0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp4-ppd.xrm-ms", cAlternateFileName="HO13F0~1.XRM")) returned 1
	[0059.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b94
	[0059.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.132] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5041085, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5041085, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe52572ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", cAlternateFileName="HO7938~1.XRM")) returned 1
	[0059.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b98
	[0059.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.132] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40e7dfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40e7dfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe41a69d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", cAlternateFileName="HO93DC~1.XRM")) returned 1
	[0059.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b9c
	[0059.133] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.133] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40e7dfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40e7dfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe41f2eb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x299f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail-pl.xrm-ms", cAlternateFileName="HO6958~1.XRM")) returned 1
	[0059.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba0
	[0059.134] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.134] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4180773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4180773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe426559f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail-ppd.xrm-ms", cAlternateFileName="HOB1F6~1.XRM")) returned 1
	[0059.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba4
	[0059.134] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.134] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe404f4c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe404f4c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4134233, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail-ul-oob.xrm-ms", cAlternateFileName="HOD57C~1.XRM")) returned 1
	[0059.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ba8
	[0059.136] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.136] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3fdcd93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3fdcd93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40c1be1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail-ul-phn.xrm-ms", cAlternateFileName="HO7BFB~1.XRM")) returned 1
	[0059.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bac
	[0059.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3f1e1f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3f1e1f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40291d7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail2-pl.xrm-ms", cAlternateFileName="HO5279~1.XRM")) returned 1
	[0059.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb0
	[0059.153] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.153] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40291d7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40291d7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40e7dfb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail2-ppd.xrm-ms", cAlternateFileName="HO589B~1.XRM")) returned 1
	[0059.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb4
	[0059.154] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.154] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3fdcd93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3fdcd93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4180773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail2-ul-oob.xrm-ms", cAlternateFileName="HOBCC6~1.XRM")) returned 1
	[0059.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bb8
	[0059.155] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3f4440f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3f4440f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe404f4c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail2-ul-phn.xrm-ms", cAlternateFileName="HO504E~1.XRM")) returned 1
	[0059.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bbc
	[0059.155] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe42fdf13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe42fdf13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43967f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail3-pl.xrm-ms", cAlternateFileName="HO0179~1.XRM")) returned 1
	[0059.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc0
	[0059.156] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.156] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe42d7c8c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe42d7c8c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43967f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail3-ppd.xrm-ms", cAlternateFileName="HO3209~1.XRM")) returned 1
	[0059.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc4
	[0059.157] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.157] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe42d7c8c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe42d7c8c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4408fb4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail3-ul-oob.xrm-ms", cAlternateFileName="HOFBD8~1.XRM")) returned 1
	[0059.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bc8
	[0059.158] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.158] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe426559f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe426559f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43241ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Retail3-ul-phn.xrm-ms", cAlternateFileName="HO113C~1.XRM")) returned 1
	[0059.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bcc
	[0059.158] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.159] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe451402c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe451402c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe485b385, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Trial-pl.xrm-ms", cAlternateFileName="HODAC9~1.XRM")) returned 1
	[0059.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd0
	[0059.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.159] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe415a524, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe415a524, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe42d7c8c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Trial-ppd.xrm-ms", cAlternateFileName="HO3298~1.XRM")) returned 1
	[0059.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd4
	[0059.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.160] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe423f37b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe423f37b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe42fdf13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Trial-ul-oob.xrm-ms", cAlternateFileName="HO6B26~1.XRM")) returned 1
	[0059.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bd8
	[0059.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.161] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe41a69d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe41a69d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe42b1a78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Trial2-pl.xrm-ms", cAlternateFileName="HO87DE~1.XRM")) returned 1
	[0059.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bdc
	[0059.161] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.161] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe423f37b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe423f37b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4370671, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Trial2-ppd.xrm-ms", cAlternateFileName="HOE683~1.XRM")) returned 1
	[0059.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be0
	[0059.162] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.162] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe415a524, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe415a524, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe423f37b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d69, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeBusinessR_Trial2-ul-oob.xrm-ms", cAlternateFileName="HO4037~1.XRM")) returned 1
	[0059.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be4
	[0059.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.163] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe47e8ce2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe47e8ce2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4919fee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="HO03E3~1.XRM")) returned 1
	[0059.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2be8
	[0059.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.164] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe46b79f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe46b79f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4881625, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="HO91BA~1.XRM")) returned 1
	[0059.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bec
	[0059.164] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.164] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe46b79f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe46b79f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe48a788d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d95, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="HOA685~1.XRM")) returned 1
	[0059.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf0
	[0059.165] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.165] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe451402c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe451402c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe47e8ce2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x542a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Grace-ppd.xrm-ms", cAlternateFileName="HOC53F~1.XRM")) returned 1
	[0059.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf4
	[0059.165] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.176] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43bca74, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43bca74, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe46ddba0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d63, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Grace-ul-oob.xrm-ms", cAlternateFileName="HO8736~1.XRM")) returned 1
	[0059.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bf8
	[0059.177] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.177] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43241ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43241ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43bca74, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HOMEST~1.XRM")) returned 1
	[0059.177] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2bfc
	[0059.178] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.178] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe498c694, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe498c694, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a4b257, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5466, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HO8BAE~1.XRM")) returned 1
	[0059.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c04
	[0059.179] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.179] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43967f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43967f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe45d2bff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HOMEST~4.XRM")) returned 1
	[0059.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c08
	[0059.179] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.180] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43967f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43967f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe451402c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HOMEST~3.XRM")) returned 1
	[0059.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c0c
	[0059.180] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.180] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43967f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43967f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe472a134, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x299b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Retail-pl.xrm-ms", cAlternateFileName="HOMEST~2.XRM")) returned 1
	[0059.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c10
	[0059.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.239] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49fedb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49fedb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4c3b14f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5464, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Retail-ppd.xrm-ms", cAlternateFileName="HOBB18~1.XRM")) returned 1
	[0059.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c14
	[0059.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.239] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a97702, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a97702, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4b56390, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Retail-ul-oob.xrm-ms", cAlternateFileName="HO08B3~1.XRM")) returned 1
	[0059.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c18
	[0059.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.240] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49664a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49664a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a25005, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ded, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Retail-ul-phn.xrm-ms", cAlternateFileName="HO75FD~1.XRM")) returned 1
	[0059.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c1c
	[0059.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.241] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49401ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49401ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49fedb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Trial-pl.xrm-ms", cAlternateFileName="HOD8E4~1.XRM")) returned 1
	[0059.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c20
	[0059.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.241] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4919fee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4919fee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a97702, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54df, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Trial-ppd.xrm-ms", cAlternateFileName="HOCCAE~1.XRM")) returned 1
	[0059.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c24
	[0059.242] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.242] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe47e8ce2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe47e8ce2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe48f3d44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Trial-ul-oob.xrm-ms", cAlternateFileName="HO7EC9~1.XRM")) returned 1
	[0059.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c28
	[0059.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.243] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4919fee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4919fee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49d8b7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Trial2-pl.xrm-ms", cAlternateFileName="HOFD0B~1.XRM")) returned 1
	[0059.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c2c
	[0059.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe48a788d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe48a788d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49664a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Trial2-ppd.xrm-ms", cAlternateFileName="HO2F4B~1.XRM")) returned 1
	[0059.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c30
	[0059.244] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.245] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4881625, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4881625, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49401ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d64, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HomeStudentR_Trial2-ul-oob.xrm-ms", cAlternateFileName="HO0E95~1.XRM")) returned 1
	[0059.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c34
	[0059.245] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.245] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4881625, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4881625, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe498c694, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="MONDOR~1.XRM")) returned 1
	[0059.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c38
	[0059.246] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4bc8a97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4bc8a97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4cad862, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="MO0B6A~1.XRM")) returned 1
	[0059.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c3c
	[0059.247] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.247] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4b7c515, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4b7c515, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4c6135d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d67, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="MOAFA6~1.XRM")) returned 1
	[0059.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c40
	[0059.247] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.247] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4b7c515, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4b7c515, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4cd3aa8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x675b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Grace-ppd.xrm-ms", cAlternateFileName="MO90E0~1.XRM")) returned 1
	[0059.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c44
	[0059.248] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.248] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4b09e82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4b09e82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4c14eea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d45, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Grace-ul-oob.xrm-ms", cAlternateFileName="MOFCF1~1.XRM")) returned 1
	[0059.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c48
	[0059.249] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.249] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a97702, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a97702, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ba2739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_KMS_Automation-ppd.xrm-ms", cAlternateFileName="MO1A2F~1.XRM")) returned 1
	[0059.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4c
	[0059.249] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.250] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49fedb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49fedb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a97702, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_KMS_Automation-ul-oob.xrm-ms", cAlternateFileName="MONDOR~2.XRM")) returned 1
	[0059.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c50
	[0059.250] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.250] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ae3c90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ae3c90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4bc8a97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x258d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_KMS_Automation-ul.xrm-ms", cAlternateFileName="MOFD63~1.XRM")) returned 1
	[0059.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c54
	[0059.251] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.251] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4c3b14f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4c3b14f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4d1ff59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_OEM_Perp-pl.xrm-ms", cAlternateFileName="MO8523~1.XRM")) returned 1
	[0059.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c58
	[0059.252] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.252] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a4b257, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a4b257, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4b09e82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6760, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="MONDOR~4.XRM")) returned 1
	[0059.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c5c
	[0059.252] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.253] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a25005, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a25005, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ae3c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="MONDOR~3.XRM")) returned 1
	[0059.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c60
	[0059.253] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.253] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4f82560, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4f82560, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe50672e1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="MO05DE~1.XRM")) returned 1
	[0059.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c64
	[0059.254] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.254] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ddeb2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ddeb2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e9d706, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2983, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Retail-pl.xrm-ms", cAlternateFileName="MO7B3F~1.XRM")) returned 1
	[0059.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c68
	[0059.254] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.255] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4e04d8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4e04d8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ec3936, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x675e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Retail-ppd.xrm-ms", cAlternateFileName="MO6A4E~1.XRM")) returned 1
	[0059.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c6c
	[0059.255] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.255] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4d461ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4d461ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e2afa8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Retail-ul-oob.xrm-ms", cAlternateFileName="MOD324~1.XRM")) returned 1
	[0059.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c70
	[0059.256] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.256] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ddeb2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ddeb2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4f82560, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Retail-ul-phn.xrm-ms", cAlternateFileName="MO39E0~1.XRM")) returned 1
	[0059.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c74
	[0059.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.257] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4c3b14f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4c3b14f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4d925e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Subscription-pl.xrm-ms", cAlternateFileName="MOE06D~1.XRM")) returned 1
	[0059.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c78
	[0059.264] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.264] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4d461ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4d461ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e511f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e69, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Subscription-ppd.xrm-ms", cAlternateFileName="MO3CDC~1.XRM")) returned 1
	[0059.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c7c
	[0059.264] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.265] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4cd3aa8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4cd3aa8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e04d8b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Subscription-ul-oob.xrm-ms", cAlternateFileName="MOD85A~1.XRM")) returned 1
	[0059.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c80
	[0059.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.265] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4c6135d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4c6135d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4d461ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Subscription2-pl.xrm-ms", cAlternateFileName="MOE696~1.XRM")) returned 1
	[0059.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c84
	[0059.266] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.266] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4cd3aa8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4cd3aa8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ddeb2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e6a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Subscription2-ppd.xrm-ms", cAlternateFileName="MOD3B0~1.XRM")) returned 1
	[0059.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c88
	[0059.267] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.267] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53fab78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53fab78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe54df9d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Subscription2-ul-oob.xrm-ms", cAlternateFileName="MO3A09~1.XRM")) returned 1
	[0059.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c8c
	[0059.269] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.269] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ff4c1f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ff4c1f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe50d9a48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTest-pl.xrm-ms", cAlternateFileName="MO7C66~1.XRM")) returned 1
	[0059.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c90
	[0059.270] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.270] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ff4c1f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ff4c1f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe533c027, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTest-ppd.xrm-ms", cAlternateFileName="MOCE88~1.XRM")) returned 1
	[0059.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c94
	[0059.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.271] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe501ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe501ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5125e2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTest-ul-oob.xrm-ms", cAlternateFileName="MODB58~1.XRM")) returned 1
	[0059.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c98
	[0059.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.272] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4f0fda9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4f0fda9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ff4c1f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTest2-pl.xrm-ms", cAlternateFileName="MO14DE~1.XRM")) returned 1
	[0059.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c9c
	[0059.272] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.272] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4e2afa8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4e2afa8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ee9b60, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTest2-ppd.xrm-ms", cAlternateFileName="MOE88F~1.XRM")) returned 1
	[0059.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca0
	[0059.273] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.273] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4f82560, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4f82560, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe50b37dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTest2-ul-oob.xrm-ms", cAlternateFileName="MO9617~1.XRM")) returned 1
	[0059.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca4
	[0059.273] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.274] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ec3936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ec3936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4fce9ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTrial-pl.xrm-ms", cAlternateFileName="MODE19~1.XRM")) returned 1
	[0059.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ca8
	[0059.274] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.274] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ec3936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ec3936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe501ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTrial-ppd.xrm-ms", cAlternateFileName="MO11F9~1.XRM")) returned 1
	[0059.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cac
	[0059.275] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.326] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4e511f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4e511f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4f5c29b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTrial-ul-oob.xrm-ms", cAlternateFileName="MO9448~1.XRM")) returned 1
	[0059.326] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.326] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb0
	[0059.326] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.327] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe565d12b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe565d12b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5741fb4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTrial2-pl.xrm-ms", cAlternateFileName="MOCBA3~1.XRM")) returned 1
	[0059.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb4
	[0059.327] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.327] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5420d88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5420d88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5505c31, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTrial2-ppd.xrm-ms", cAlternateFileName="MO108C~1.XRM")) returned 1
	[0059.327] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cb8
	[0059.328] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.328] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe54934e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe54934e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe559e56a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_SubTrial2-ul-oob.xrm-ms", cAlternateFileName="MOCCE8~1.XRM")) returned 1
	[0059.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cbc
	[0059.329] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.329] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53d491f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53d491f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe54934e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Trial-pl.xrm-ms", cAlternateFileName="MOB483~1.XRM")) returned 1
	[0059.329] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc0
	[0059.329] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.330] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53d491f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53d491f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe55520ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Trial-ppd.xrm-ms", cAlternateFileName="MO25B8~1.XRM")) returned 1
	[0059.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc4
	[0059.330] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.330] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53ae71a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53ae71a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe546d2b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoR_Trial-ul-oob.xrm-ms", cAlternateFileName="MOE202~1.XRM")) returned 1
	[0059.330] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cc8
	[0059.331] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.331] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe50d9a48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe50d9a48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe53884b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30bf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="MONDOV~1.XRM")) returned 1
	[0059.331] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ccc
	[0059.332] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.332] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53ae71a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53ae71a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5420d88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="MO445C~1.XRM")) returned 1
	[0059.332] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd0
	[0059.334] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.335] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe533c027, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe533c027, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe53d491f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2581, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_KMS_Client-ul.xrm-ms", cAlternateFileName="MONDOV~4.XRM")) returned 1
	[0059.335] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd4
	[0059.335] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.336] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe533c027, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe533c027, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5420d88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_MAK-pl.xrm-ms", cAlternateFileName="MONDOV~3.XRM")) returned 1
	[0059.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cd8
	[0059.336] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.336] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5125e2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5125e2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe53ae71a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x307e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_MAK-ppd.xrm-ms", cAlternateFileName="MONDOV~2.XRM")) returned 1
	[0059.336] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cdc
	[0059.337] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.337] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe565d12b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe565d12b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe57b4606, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_MAK-ul-oob.xrm-ms", cAlternateFileName="MOA9D3~1.XRM")) returned 1
	[0059.337] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce0
	[0059.337] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.339] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56f5a42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe56f5a42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe57da862, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MondoVL_MAK-ul-phn.xrm-ms", cAlternateFileName="MOACCE~1.XRM")) returned 1
	[0059.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce4
	[0059.345] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.346] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe55c47dc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe55c47dc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe568339c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_Grace-ppd.xrm-ms", cAlternateFileName="O374C4~1.XRM")) returned 1
	[0059.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ce8
	[0059.346] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.346] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe55eaa21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe55eaa21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe56cf7ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_Grace-ul-oob.xrm-ms", cAlternateFileName="O346D5~1.XRM")) returned 1
	[0059.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cec
	[0059.347] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.347] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5578312, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5578312, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe56f5a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_Subscription-pl.xrm-ms", cAlternateFileName="O365BU~4.XRM")) returned 1
	[0059.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf0
	[0059.348] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.348] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe559e56a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe559e56a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe565d12b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x632a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_Subscription-ppd.xrm-ms", cAlternateFileName="O3F979~1.XRM")) returned 1
	[0059.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf4
	[0059.348] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.349] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5578312, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5578312, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5636f0a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_Subscription-ul-oob.xrm-ms", cAlternateFileName="O38A0E~1.XRM")) returned 1
	[0059.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cf8
	[0059.349] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.349] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5505c31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5505c31, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe55c47dc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_SubTest-pl.xrm-ms", cAlternateFileName="O365BU~3.XRM")) returned 1
	[0059.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2cfc
	[0059.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.350] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5505c31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5505c31, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe55eaa21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57c1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_SubTest-ppd.xrm-ms", cAlternateFileName="O365BU~2.XRM")) returned 1
	[0059.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d00
	[0059.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.351] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe54934e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe54934e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5578312, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_SubTest-ul-oob.xrm-ms", cAlternateFileName="O365BU~1.XRM")) returned 1
	[0059.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d04
	[0059.351] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.352] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe58731f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe58731f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe595804a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_SubTrial-pl.xrm-ms", cAlternateFileName="O37A5D~1.XRM")) returned 1
	[0059.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d08
	[0059.352] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.352] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5800a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5800a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5931e55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_SubTrial-ppd.xrm-ms", cAlternateFileName="O3DA6A~1.XRM")) returned 1
	[0059.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d0c
	[0059.353] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.353] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5afba39, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5afba39, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5bba5ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365BusinessR_SubTrial-ul-oob.xrm-ms", cAlternateFileName="O369C1~1.XRM")) returned 1
	[0059.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d10
	[0059.356] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.356] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe57da862, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe57da862, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe589944e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bd3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="O363C4~1.XRM")) returned 1
	[0059.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d14
	[0059.357] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.357] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5800a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5800a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe58e5931, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="O3BF9B~1.XRM")) returned 1
	[0059.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d18
	[0059.359] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.360] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5768162, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5768162, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe59a44ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="O365HO~3.XRM")) returned 1
	[0059.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d1c
	[0059.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.360] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe568339c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe568339c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5768162, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a1c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Grace-ppd.xrm-ms", cAlternateFileName="O365HO~1.XRM")) returned 1
	[0059.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d20
	[0059.361] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.362] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5768162, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5768162, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5800a85, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Grace-ul-oob.xrm-ms", cAlternateFileName="O365HO~4.XRM")) returned 1
	[0059.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d24
	[0059.362] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.362] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe578e40e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe578e40e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe58731f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription1-pl.xrm-ms", cAlternateFileName="O3470D~1.XRM")) returned 1
	[0059.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d28
	[0059.363] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.364] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56f5a42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe56f5a42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5800a85, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription1-ppd.xrm-ms", cAlternateFileName="O365HO~2.XRM")) returned 1
	[0059.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d2c
	[0059.364] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.365] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61d6728, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61d6728, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe626f052, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription1-ul-oob.xrm-ms", cAlternateFileName="O3EC08~1.XRM")) returned 1
	[0059.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d30
	[0059.365] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.365] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5a893f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5a893f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5b6e14c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription2-pl.xrm-ms", cAlternateFileName="O394D6~1.XRM")) returned 1
	[0059.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.411] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d34
	[0059.411] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.412] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5a631e9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5a631e9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5b47f19, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription2-ppd.xrm-ms", cAlternateFileName="O36B97~1.XRM")) returned 1
	[0059.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d38
	[0059.412] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.413] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5a631e9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5a631e9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5b94335, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription2-ul-oob.xrm-ms", cAlternateFileName="O381C0~1.XRM")) returned 1
	[0059.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d3c
	[0059.413] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.413] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59a44ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe59a44ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5ad5847, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription3-pl.xrm-ms", cAlternateFileName="O3FF0E~1.XRM")) returned 1
	[0059.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d40
	[0059.414] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.414] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe595804a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe595804a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5a631e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription3-ppd.xrm-ms", cAlternateFileName="O32FFC~1.XRM")) returned 1
	[0059.420] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d44
	[0059.421] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.421] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe589944e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe589944e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe597e395, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription3-ul-oob.xrm-ms", cAlternateFileName="O3C0D2~1.XRM")) returned 1
	[0059.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d48
	[0059.422] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.422] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe597e395, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe597e395, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5a893f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription4-pl.xrm-ms", cAlternateFileName="O35B45~1.XRM")) returned 1
	[0059.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d4c
	[0059.423] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.423] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5931e55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5931e55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5a3cfb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription4-ppd.xrm-ms", cAlternateFileName="O3F5C1~1.XRM")) returned 1
	[0059.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d50
	[0059.424] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.424] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5931e55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5931e55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5afba39, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription4-ul-oob.xrm-ms", cAlternateFileName="O370C7~1.XRM")) returned 1
	[0059.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d54
	[0059.425] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.425] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c9f573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c9f573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5d37d8b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription5-pl.xrm-ms", cAlternateFileName="O397F0~1.XRM")) returned 1
	[0059.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d58
	[0059.426] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.426] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c791bb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c791bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5d11b2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription5-ppd.xrm-ms", cAlternateFileName="O3057F~1.XRM")) returned 1
	[0059.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d5c
	[0059.427] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.427] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c52f59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c52f59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5ceb8e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_Subscription5-ul-oob.xrm-ms", cAlternateFileName="O3FD01~1.XRM")) returned 1
	[0059.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d60
	[0059.428] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.428] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c2ccf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c2ccf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5cc5650, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest1-pl.xrm-ms", cAlternateFileName="O35B7D~1.XRM")) returned 1
	[0059.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d64
	[0059.429] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.429] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5fc05cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5fc05cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe60f1896, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest1-ppd.xrm-ms", cAlternateFileName="O3955A~1.XRM")) returned 1
	[0059.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d68
	[0059.429] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.430] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5afba39, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5afba39, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5f9a39c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest1-ul-oob.xrm-ms", cAlternateFileName="O353AD~1.XRM")) returned 1
	[0059.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d6c
	[0059.431] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.431] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5bba5ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5bba5ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c9f573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest2-pl.xrm-ms", cAlternateFileName="O3B6B4~1.XRM")) returned 1
	[0059.431] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d70
	[0059.432] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.432] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5b6e14c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b6e14c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c52f59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest2-ppd.xrm-ms", cAlternateFileName="O3F44A~1.XRM")) returned 1
	[0059.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d74
	[0059.433] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.433] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5b47f19, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b47f19, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c2ccf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest2-ul-oob.xrm-ms", cAlternateFileName="O3149B~1.XRM")) returned 1
	[0059.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d78
	[0059.434] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.434] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5b94335, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b94335, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c791bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest3-pl.xrm-ms", cAlternateFileName="O33C81~1.XRM")) returned 1
	[0059.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d7c
	[0059.436] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.436] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5fc05cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5fc05cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe607f17a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest3-ppd.xrm-ms", cAlternateFileName="O3BFD7~1.XRM")) returned 1
	[0059.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d80
	[0059.436] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.437] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe60f1896, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe60f1896, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe61d6728, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest3-ul-oob.xrm-ms", cAlternateFileName="O3E990~1.XRM")) returned 1
	[0059.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d84
	[0059.437] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.438] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5e1cbb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5e1cbb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe600ca61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest4-pl.xrm-ms", cAlternateFileName="O3D05A~1.XRM")) returned 1
	[0059.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d88
	[0059.438] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.439] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5df6968, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5df6968, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5fe6802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest4-ppd.xrm-ms", cAlternateFileName="O34B59~1.XRM")) returned 1
	[0059.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d8c
	[0059.439] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.440] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dd0763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5dd0763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6058f9b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest4-ul-oob.xrm-ms", cAlternateFileName="O3E65D~1.XRM")) returned 1
	[0059.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d90
	[0059.440] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.441] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5cc5650, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5cc5650, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5daa4c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest5-pl.xrm-ms", cAlternateFileName="O37513~1.XRM")) returned 1
	[0059.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d94
	[0059.441] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.442] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dd0763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5dd0763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5fc05cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest5-ppd.xrm-ms", cAlternateFileName="O369C8~1.XRM")) returned 1
	[0059.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d98
	[0059.442] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.443] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5d37d8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5d37d8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5e1cbb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTest5-ul-oob.xrm-ms", cAlternateFileName="O3A74B~1.XRM")) returned 1
	[0059.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d9c
	[0059.443] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.444] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5d11b2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5d11b2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5df6968, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial1-pl.xrm-ms", cAlternateFileName="O3B637~1.XRM")) returned 1
	[0059.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2da0
	[0059.444] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.445] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5ceb8e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5ceb8e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5dd0763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial1-ppd.xrm-ms", cAlternateFileName="O32BFF~1.XRM")) returned 1
	[0059.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2da4
	[0059.512] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.512] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61b0488, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61b0488, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6248ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial1-ul-oob.xrm-ms", cAlternateFileName="O3BAC6~1.XRM")) returned 1
	[0059.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2da8
	[0059.513] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.513] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61b0488, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61b0488, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6353e21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial2-pl.xrm-ms", cAlternateFileName="O325AC~1.XRM")) returned 1
	[0059.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dac
	[0059.513] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.514] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6117ab6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6117ab6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe61fc917, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial2-ppd.xrm-ms", cAlternateFileName="O3A06B~1.XRM")) returned 1
	[0059.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2db0
	[0059.514] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.514] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6353e21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6353e21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6412a1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial2-ul-oob.xrm-ms", cAlternateFileName="O386C3~1.XRM")) returned 1
	[0059.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2db4
	[0059.515] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.515] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe60a53cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe60a53cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6163f9f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial3-pl.xrm-ms", cAlternateFileName="O380E3~1.XRM")) returned 1
	[0059.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2db8
	[0059.515] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.516] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5fe6802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5fe6802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe60a53cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial3-ppd.xrm-ms", cAlternateFileName="O3458D~1.XRM")) returned 1
	[0059.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dbc
	[0059.516] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.516] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe60cb644, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe60cb644, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe61b0488, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial3-ul-oob.xrm-ms", cAlternateFileName="O3E705~1.XRM")) returned 1
	[0059.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc0
	[0059.517] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.517] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe607f17a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe607f17a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6117ab6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial4-pl.xrm-ms", cAlternateFileName="O36262~1.XRM")) returned 1
	[0059.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc4
	[0059.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.518] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe607f17a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe607f17a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6222ba8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial4-ppd.xrm-ms", cAlternateFileName="O3CAE8~1.XRM")) returned 1
	[0059.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc8
	[0059.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.519] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe600ca61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe600ca61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe60cb644, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial4-ul-oob.xrm-ms", cAlternateFileName="O3B67A~1.XRM")) returned 1
	[0059.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dcc
	[0059.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.519] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7d1b583, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe7d1b583, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe7ebef60, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial5-pl.xrm-ms", cAlternateFileName="O3072B~1.XRM")) returned 1
	[0059.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dd0
	[0059.520] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.520] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651da72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe651da72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe664edb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial5-ppd.xrm-ms", cAlternateFileName="O3CFAB~1.XRM")) returned 1
	[0059.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dd4
	[0059.521] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.521] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe632dbcf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe632dbcf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe63ec79f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365HomePremR_SubTrial5-ul-oob.xrm-ms", cAlternateFileName="O3F58C~1.XRM")) returned 1
	[0059.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dd8
	[0059.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.522] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe63079a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe63079a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe63c64e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="O338DF~1.XRM")) returned 1
	[0059.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ddc
	[0059.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.522] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62bb50d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe62bb50d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe637a07d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="O3737D~1.XRM")) returned 1
	[0059.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2de0
	[0059.523] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.523] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe626f052, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe626f052, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe632dbcf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d95, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="O365PR~4.XRM")) returned 1
	[0059.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2de4
	[0059.524] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.524] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61fc917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61fc917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe62bb50d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5eee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Grace-ppd.xrm-ms", cAlternateFileName="O365PR~1.XRM")) returned 1
	[0059.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2de8
	[0059.525] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.525] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62bb50d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe62bb50d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe651da72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d63, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Grace-ul-oob.xrm-ms", cAlternateFileName="O3377F~1.XRM")) returned 1
	[0059.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dec
	[0059.525] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.525] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6248ddb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6248ddb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe63079a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription1-pl.xrm-ms", cAlternateFileName="O365PR~3.XRM")) returned 1
	[0059.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2df0
	[0059.526] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.526] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6222ba8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6222ba8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe62bb50d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription1-ppd.xrm-ms", cAlternateFileName="O365PR~2.XRM")) returned 1
	[0059.526] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2df4
	[0059.527] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.527] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6543cce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6543cce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6674f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription1-ul-oob.xrm-ms", cAlternateFileName="O378F4~1.XRM")) returned 1
	[0059.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2df8
	[0059.527] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.529] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6a54cdd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6a54cdd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6cb7248, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription2-pl.xrm-ms", cAlternateFileName="O3B74B~1.XRM")) returned 1
	[0059.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dfc
	[0059.529] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.529] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64f781d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64f781d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6628a99, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription2-ppd.xrm-ms", cAlternateFileName="O3CF14~1.XRM")) returned 1
	[0059.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e00
	[0059.530] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.530] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64d15f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64d15f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe65dc66b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription2-ul-oob.xrm-ms", cAlternateFileName="O3F5D3~1.XRM")) returned 1
	[0059.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e04
	[0059.534] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.535] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64ab356, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64ab356, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe669b26a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription3-pl.xrm-ms", cAlternateFileName="O33BFA~1.XRM")) returned 1
	[0059.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e08
	[0059.535] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.535] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe637a07d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe637a07d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe648513f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription3-ppd.xrm-ms", cAlternateFileName="O37461~1.XRM")) returned 1
	[0059.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.536] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e0c
	[0059.537] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64ab356, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64ab356, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6569f23, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription3-ul-oob.xrm-ms", cAlternateFileName="O34BB6~1.XRM")) returned 1
	[0059.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e10
	[0059.537] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6412a1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6412a1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe64f781d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription4-pl.xrm-ms", cAlternateFileName="O3DFB3~1.XRM")) returned 1
	[0059.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e14
	[0059.538] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.538] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe63c64e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe63c64e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe64d15f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription4-ppd.xrm-ms", cAlternateFileName="O31633~1.XRM")) returned 1
	[0059.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e18
	[0059.539] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe63a029d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe63a029d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe64ab356, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription4-ul-oob.xrm-ms", cAlternateFileName="O37C41~1.XRM")) returned 1
	[0059.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e1c
	[0059.540] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.540] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6949c74, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6949c74, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6aa11e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription5-pl.xrm-ms", cAlternateFileName="O30C10~1.XRM")) returned 1
	[0059.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e20
	[0059.540] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.540] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6949c74, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6949c74, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6c6ae0b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription5-ppd.xrm-ms", cAlternateFileName="O390D7~1.XRM")) returned 1
	[0059.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e24
	[0059.541] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.541] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe68d7584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe68d7584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6a0884b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_Subscription5-ul-oob.xrm-ms", cAlternateFileName="O3F187~1.XRM")) returned 1
	[0059.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e28
	[0059.542] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.542] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe68d7584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe68d7584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6a54cdd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial1-pl.xrm-ms", cAlternateFileName="O342A1~1.XRM")) returned 1
	[0059.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e2c
	[0059.542] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.543] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe669b26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe669b26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6923a47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial1-ppd.xrm-ms", cAlternateFileName="O37028~1.XRM")) returned 1
	[0059.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e30
	[0059.608] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.608] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6628a99, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6628a99, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe699614a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial1-ul-oob.xrm-ms", cAlternateFileName="O3E0EE~1.XRM")) returned 1
	[0059.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e34
	[0059.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.609] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe66c1465, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe66c1465, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6949c74, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial2-pl.xrm-ms", cAlternateFileName="O376CD~1.XRM")) returned 1
	[0059.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e38
	[0059.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.610] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe664edb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe664edb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe68d7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial2-ppd.xrm-ms", cAlternateFileName="O3A4A6~1.XRM")) returned 1
	[0059.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e3c
	[0059.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.611] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe664edb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe664edb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe688b059, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial2-ul-oob.xrm-ms", cAlternateFileName="O31D4D~1.XRM")) returned 1
	[0059.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e40
	[0059.611] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.611] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6628a99, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6628a99, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe66e76b1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial3-pl.xrm-ms", cAlternateFileName="O31B86~1.XRM")) returned 1
	[0059.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e44
	[0059.612] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.612] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e0e778, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6e0e778, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6ecd3ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial3-ppd.xrm-ms", cAlternateFileName="O3569A~1.XRM")) returned 1
	[0059.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e48
	[0059.612] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.613] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6de85cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6de85cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe70e34ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial3-ul-oob.xrm-ms", cAlternateFileName="O35C5F~1.XRM")) returned 1
	[0059.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e4c
	[0059.613] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.613] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6d2994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6d2994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6e5ac86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial4-pl.xrm-ms", cAlternateFileName="O3C05D~1.XRM")) returned 1
	[0059.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e50
	[0059.614] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.614] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6d03706, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6d03706, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6ea70e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial4-ppd.xrm-ms", cAlternateFileName="O35E87~1.XRM")) returned 1
	[0059.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e54
	[0059.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.615] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c6ae0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6c6ae0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6e34a2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial4-ul-oob.xrm-ms", cAlternateFileName="O3749E~1.XRM")) returned 1
	[0059.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e58
	[0059.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.615] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe699614a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe699614a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6bac1fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial5-pl.xrm-ms", cAlternateFileName="O39C21~1.XRM")) returned 1
	[0059.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e5c
	[0059.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.616] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c6ae0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6c6ae0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6e0e778, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial5-ppd.xrm-ms", cAlternateFileName="O33C0D~1.XRM")) returned 1
	[0059.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0059.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e60
	[0059.617] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0059.617] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6aa11e8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6aa11e8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6d2994f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="O365ProPlusR_SubTrial5-ul-oob.xrm-ms", cAlternateFileName="O3899D~1.XRM")) returned 1
	[0060.648] SetLastError (dwErrCode=0x0) 
	[0060.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.652] GetLastError () returned 0x5
	[0060.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0060.652] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.652] SetLastError (dwErrCode=0x0) 
	[0060.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.652] GetLastError () returned 0x5
	[0060.652] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0060.652] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0060.652] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.652] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0060.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8dff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x355c
	[0060.654] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.654] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="APPXMA~1.XML")) returned 0
	[0060.654] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0060.654] SetLastError (dwErrCode=0x0) 
	[0060.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\loc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.655] GetLastError () returned 0x5
	[0060.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0060.655] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.655] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0060.655] SetLastError (dwErrCode=0x0) 
	[0060.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.655] GetLastError () returned 0x5
	[0060.655] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0060.655] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.655] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0060.656] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.656] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0060.656] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppVIsvSubsystems64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0060.656] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0060.656] SetLastError (dwErrCode=0x0) 
	[0060.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.656] GetLastError () returned 0x5
	[0060.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.656] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0060.658] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.659] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x981606a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x981606a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2446a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessmui.msi.16_accessmui.mcxml", cAlternateFileName="ACCESS~2.MCX")) returned 1
	[0060.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d916c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3564
	[0060.659] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.660] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessmuiset.msi.16_accessmuiset.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1
	[0060.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d94d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3568
	[0060.660] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.660] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e134, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="branding.mcxml", cAlternateFileName="BRANDI~1.MCX")) returned 1
	[0060.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d98460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x356c
	[0060.661] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.661] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dcfmui.msi.16_dcfmui.mcxml", cAlternateFileName="DCFMUI~1.MCX")) returned 1
	[0060.661] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3570
	[0060.662] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.662] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="excelmui.msi.16_excelmui.mcxml", cAlternateFileName="EXCELM~1.MCX")) returned 1
	[0060.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3574
	[0060.663] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.663] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x653c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groovemui.msi.16_groovemui.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1
	[0060.663] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da28d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3578
	[0060.664] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.664] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1249c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lyncmui.msi.16_lyncmui.mcxml", cAlternateFileName="LYNCMU~1.MCX")) returned 1
	[0060.664] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da5fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x357c
	[0060.664] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.665] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98fae45, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32mui.msi.16_office32mui.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1
	[0060.665] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3580
	[0060.666] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.666] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemui.msi.16_AppXManifestLoc.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1
	[0060.666] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3584
	[0060.666] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.667] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x659ca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemui.msi.16_officemui.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1
	[0060.667] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db0410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3588
	[0060.667] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.667] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x404, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemui.msi.16_PostCommon.Office.MUI.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1
	[0060.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db3ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x358c
	[0060.668] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.668] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemuiset.msi.16_officemuiset.mcxml", cAlternateFileName="OF42EC~1.MCX")) returned 1
	[0060.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db71b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3590
	[0060.669] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.669] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1233a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="onenotemui.msi.16_onenotemui.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1
	[0060.669] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dba880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3594
	[0060.670] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.670] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmmui.msi.16_osmmui.mcxml", cAlternateFileName="OSMMUI~1.MCX")) returned 1
	[0060.670] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dbdf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3598
	[0060.671] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.671] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x940a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmuxmui.msi.16_osmuxmui.mcxml", cAlternateFileName="OSMUXM~1.MCX")) returned 1
	[0060.671] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc1620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x359c
	[0060.671] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.672] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x642ca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="outlookmui.msi.16_outlookmui.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1
	[0060.672] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc4cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35a0
	[0060.672] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.673] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b8e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpointmui.msi.16_powerpointmui.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1
	[0060.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc83c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35a4
	[0060.673] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.673] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8c7ea5, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1a4dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="projectmui.msi.16_projectmui.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1
	[0060.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcba90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35a8
	[0060.674] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.674] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11094, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1
	[0060.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcf160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35ac
	[0060.675] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.675] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proofing.msi.16_proofing.mcxml", cAlternateFileName="PROOFI~1.MCX")) returned 1
	[0060.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35b0
	[0060.676] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.676] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ad0c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="publishermui.msi.16_publishermui.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1
	[0060.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd5f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35b4
	[0060.677] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.677] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x444fb18, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x444fb18, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x44e8517, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2061bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="visiomui.msi.16_visiomui.mcxml", cAlternateFileName="VISIOM~1.MCX")) returned 1
	[0060.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd95d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35b8
	[0060.678] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.678] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cb00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wordmui.msi.16_wordmui.mcxml", cAlternateFileName="WORDMU~1.MCX")) returned 1
	[0060.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ddcca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35bc
	[0060.679] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.679] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cb00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wordmui.msi.16_wordmui.mcxml", cAlternateFileName="WORDMU~1.MCX")) returned 0
	[0060.679] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0060.680] SetLastError (dwErrCode=0x0) 
	[0060.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.682] GetLastError () returned 0x5
	[0060.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.682] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.682] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0060.682] SetLastError (dwErrCode=0x0) 
	[0060.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.682] GetLastError () returned 0x5
	[0060.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.682] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0060.683] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.683] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1
	[0060.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de0370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c0
	[0060.684] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.684] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 0
	[0060.684] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0060.684] SetLastError (dwErrCode=0x0) 
	[0060.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.684] GetLastError () returned 0x5
	[0060.684] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.685] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.685] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0060.685] SetLastError (dwErrCode=0x0) 
	[0060.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.685] GetLastError () returned 0x5
	[0060.685] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.685] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0060.685] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.685] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1
	[0060.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de3a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c4
	[0060.686] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.686] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 0
	[0060.686] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0060.686] SetLastError (dwErrCode=0x0) 
	[0060.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.687] GetLastError () returned 0x5
	[0060.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.687] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.687] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="x-none", cAlternateFileName="")) returned 1
	[0060.687] SetLastError (dwErrCode=0x0) 
	[0060.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.687] GetLastError () returned 0x5
	[0060.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0060.687] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0060.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0060.688] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.689] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1164cbcb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10257a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Access.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1
	[0060.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de7110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c8
	[0060.690] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.690] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93296, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DCF.x-none.msi.16_mondoww.mcxml", cAlternateFileName="DCFX-N~1.MCX")) returned 1
	[0060.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dea7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35cc
	[0060.691] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.691] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21d4ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Excel.x-none.msi.16_mondoww.mcxml", cAlternateFileName="EXCELX~1.MCX")) returned 1
	[0060.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dedeb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35d0
	[0060.692] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.692] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36bf4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Groove.x-none.msi.16_mondoww.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1
	[0060.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df1580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35d4
	[0060.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.693] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Lync.x-none.msi.16_mondoww.mcxml", cAlternateFileName="LYNCX-~1.MCX")) returned 1
	[0060.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df4c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35d8
	[0060.694] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.694] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x109e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.x-none.msi.16_authored.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1
	[0060.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2df8320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35dc
	[0060.695] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.695] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.x-none.msi.16_Common.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1
	[0060.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dfb9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35e0
	[0060.695] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.696] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d407, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.x-none.msi.16_licensing.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1
	[0060.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dff0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35e4
	[0060.697] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.697] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402c64, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1
	[0060.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e02790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35e8
	[0060.698] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.698] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.x-none.msi.16_postcommon.mcxml", cAlternateFileName="OFC55B~1.MCX")) returned 1
	[0060.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e05e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35ec
	[0060.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.699] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", cAlternateFileName="OFD6FB~1.MCX")) returned 1
	[0060.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e09530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35f0
	[0060.700] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.700] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa25e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32ww.msi.16_crossbitness.mcxml", cAlternateFileName="OF73AB~1.MCX")) returned 1
	[0060.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e0cc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35f4
	[0060.701] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.701] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d3b0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32ww.msi.16_office32ww.mcxml", cAlternateFileName="OF4373~1.MCX")) returned 1
	[0060.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e102d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35f8
	[0060.701] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.702] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128c7033, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNote.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1
	[0060.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e139a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35fc
	[0060.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.703] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNote.x-none.msi.16_OneNote.mcxml", cAlternateFileName="ONENOT~2.MCX")) returned 1
	[0060.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e17070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3600
	[0060.703] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.704] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSM.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMX-N~1.MCX")) returned 1
	[0060.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e1a740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3604
	[0060.704] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.704] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSMUX.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMUXX~1.MCX")) returned 1
	[0060.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e1de10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3608
	[0060.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.705] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1181684e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20337a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Outlook.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1
	[0060.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e214e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x360c
	[0060.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.706] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", cAlternateFileName="OUTLOO~2.MCX")) returned 1
	[0060.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e24bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3610
	[0060.707] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.707] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2504a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivot.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1
	[0060.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e28280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3614
	[0060.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.708] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x123438ef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x123438ef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12801a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPoint.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~2.MCX")) returned 1
	[0060.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e2b950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3618
	[0060.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.709] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xca698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Project.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1
	[0060.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e2f020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x361c
	[0060.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.710] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268ee4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Publisher.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1
	[0060.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e326f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3620
	[0060.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0060.711] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x148572, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Visio.x-none.msi.16_mondoww.mcxml", cAlternateFileName="VISIOX~1.MCX")) returned 1
	[0060.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0060.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2e35dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3624
	[0061.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.488] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c81c51, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c81c51, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", cAlternateFileName="VISIOX~2.MCX")) returned 1
	[0061.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3628
	[0061.489] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.490] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 1
	[0061.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x362c
	[0061.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.491] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 0
	[0061.491] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0061.492] SetLastError (dwErrCode=0x0) 
	[0061.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.493] GetLastError () returned 0x5
	[0061.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0061.493] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="x-none", cAlternateFileName="")) returned 0
	[0061.494] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0061.494] SetLastError (dwErrCode=0x0) 
	[0061.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.494] GetLastError () returned 0x5
	[0061.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0061.494] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.494] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0061.494] SetLastError (dwErrCode=0x0) 
	[0061.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.494] GetLastError () returned 0x5
	[0061.494] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0061.494] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0061.494] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.496] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0061.496] SetLastError (dwErrCode=0x0) 
	[0061.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.496] GetLastError () returned 0x5
	[0061.496] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0061.497] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.497] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0061.497] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.498] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1
	[0061.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3630
	[0061.499] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.500] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1
	[0061.500] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1
	[0061.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3634
	[0061.501] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.501] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46a78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1
	[0061.501] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1
	[0061.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3638
	[0061.502] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.502] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc0d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1
	[0061.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x363c
	[0061.503] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.504] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1
	[0061.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3640
	[0061.505] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.505] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1
	[0061.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3644
	[0061.506] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.506] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1
	[0061.506] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1
	[0061.506] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0061.507] SetLastError (dwErrCode=0x0) 
	[0061.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.508] GetLastError () returned 0x5
	[0061.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0061.508] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0061.509] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.509] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1
	[0061.510] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.510] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x364c
	[0061.511] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.511] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0
	[0061.511] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0061.511] SetLastError (dwErrCode=0x0) 
	[0061.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.511] GetLastError () returned 0x5
	[0061.511] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0061.511] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.512] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0061.512] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.512] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3648
	[0061.512] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.513] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BW.CSS", cAlternateFileName="")) returned 1
	[0061.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3650
	[0061.515] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.515] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1
	[0061.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3654
	[0061.516] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.516] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1
	[0061.516] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19490, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1
	[0061.516] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1
	[0061.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3658
	[0061.517] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.517] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa284551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ede, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1
	[0061.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x365c
	[0061.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.518] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x401b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1
	[0061.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3660
	[0061.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.519] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1
	[0061.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3664
	[0061.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.520] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1
	[0061.520] SetLastError (dwErrCode=0x0) 
	[0061.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.520] GetLastError () returned 0x5
	[0061.520] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0061.520] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0061.522] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0061.522] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1
	[0061.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x366c
	[0061.523] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.523] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1
	[0061.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3670
	[0061.524] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.524] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1
	[0061.524] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1
	[0061.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3674
	[0061.670] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.670] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0
	[0061.670] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0061.671] SetLastError (dwErrCode=0x0) 
	[0061.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.673] GetLastError () returned 0x5
	[0061.673] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0061.673] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.673] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0061.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3668
	[0061.673] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.673] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3163050, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3163050, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3163050, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2a658, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1
	[0061.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3678
	[0061.674] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.674] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1
	[0061.674] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x367c
	[0061.675] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.675] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1
	[0061.675] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3680
	[0061.675] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.676] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b09036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1b09036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1b09036, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11ca8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1
	[0061.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3684
	[0061.676] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.676] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x295718d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x295718d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x297d49a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1
	[0061.676] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3688
	[0061.677] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.677] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3863f35, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3863f35, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3863f35, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1
	[0061.677] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41af, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1
	[0061.677] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5101, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1
	[0061.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x368c
	[0061.677] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.678] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd270, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1
	[0061.678] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6870, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1
	[0061.678] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1
	[0061.679] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45f3450, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45f3450, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45f3450, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1
	[0061.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3690
	[0061.680] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.680] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173da8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1
	[0061.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3694
	[0061.680] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.680] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1
	[0061.680] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3698
	[0061.681] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.681] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1
	[0061.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x369c
	[0061.682] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.682] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1
	[0061.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36a0
	[0061.682] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.683] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1
	[0061.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36a4
	[0061.683] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.683] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1
	[0061.683] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a9e866, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1
	[0061.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36a8
	[0061.684] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.684] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e76730, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e76730, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e76730, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x154b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1
	[0061.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36ac
	[0061.685] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.685] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1
	[0061.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36b0
	[0061.685] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1
	[0061.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36b4
	[0061.686] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="frintl.dll", cAlternateFileName="")) returned 1
	[0061.686] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1
	[0061.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36b8
	[0061.687] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.687] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1
	[0061.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36bc
	[0061.687] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x31af525, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x31af525, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50a50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1
	[0061.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36c0
	[0061.688] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.688] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1
	[0061.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36c4
	[0061.689] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.689] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94d80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1
	[0061.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36c8
	[0061.690] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.690] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1
	[0061.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36cc
	[0061.690] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.691] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1
	[0061.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36d0
	[0061.691] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.691] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1
	[0061.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36d4
	[0061.692] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.692] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1
	[0061.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36d8
	[0061.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.693] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1
	[0061.693] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1
	[0061.693] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1
	[0061.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36dc
	[0061.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.694] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b181c2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b181c2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bd6df0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87d4a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1
	[0061.694] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1
	[0061.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36e0
	[0061.694] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.694] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1
	[0061.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36e4
	[0061.695] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.695] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1
	[0061.695] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36e8
	[0061.696] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.696] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1
	[0061.696] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36ec
	[0061.697] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.697] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x30ca74c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x30ca74c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x30ca74c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1
	[0061.697] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36f0
	[0061.698] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.698] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1
	[0061.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36f4
	[0061.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.699] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1
	[0061.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36f8
	[0061.700] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.700] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf06cb6d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf06cb6d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf06cb6d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3648, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IFDPINTL.DLL", cAlternateFileName="")) returned 1
	[0061.701] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1
	[0061.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36fc
	[0061.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.702] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1
	[0061.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3700
	[0061.702] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.703] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1
	[0061.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3704
	[0061.703] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.704] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1
	[0061.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3708
	[0061.704] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.704] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b5ed86, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b5ed86, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3b5ed86, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb6c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1
	[0061.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x370c
	[0061.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC.HXS", cAlternateFileName="")) returned 1
	[0061.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3710
	[0061.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.706] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd36584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf4c298e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x522a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1
	[0061.706] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_BASIC.HXS", cAlternateFileName="LYNC_B~1.HXS")) returned 1
	[0061.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3714
	[0061.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.707] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_BASIC_COL.HXC", cAlternateFileName="LYNC_B~1.HXC")) returned 1
	[0061.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3718
	[0061.707] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.707] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_BASIC_COL.HXT", cAlternateFileName="LYNC_B~1.HXT")) returned 1
	[0061.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x371c
	[0061.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.710] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_BASIC_F_COL.HXK", cAlternateFileName="LYNC_B~2.HXK")) returned 1
	[0061.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3720
	[0061.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.710] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_BASIC_K_COL.HXK", cAlternateFileName="LYNC_B~1.HXK")) returned 1
	[0061.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3724
	[0061.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.711] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_COL.HXC", cAlternateFileName="")) returned 1
	[0061.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3728
	[0061.712] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.779] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_COL.HXT", cAlternateFileName="")) returned 1
	[0061.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x372c
	[0061.780] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.780] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_F_COL.HXK", cAlternateFileName="LYNC_F~1.HXK")) returned 1
	[0061.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3730
	[0061.781] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.781] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_K_COL.HXK", cAlternateFileName="LYNC_K~1.HXK")) returned 1
	[0061.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3734
	[0061.782] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.782] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22756, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ONLINE.HXS", cAlternateFileName="LYNC_O~1.HXS")) returned 1
	[0061.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3738
	[0061.782] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.783] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ONLINE_COL.HXC", cAlternateFileName="LYNC_O~1.HXC")) returned 1
	[0061.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x373c
	[0061.783] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.783] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ONLINE_COL.HXT", cAlternateFileName="LYNC_O~1.HXT")) returned 1
	[0061.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3740
	[0061.784] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.784] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ONLINE_F_COL.HXK", cAlternateFileName="LYNC_O~2.HXK")) returned 1
	[0061.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3744
	[0061.785] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.785] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ONLINE_K_COL.HXK", cAlternateFileName="LYNC_O~1.HXK")) returned 1
	[0061.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3748
	[0061.785] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.785] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb60697b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136a50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1
	[0061.785] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb8dc6bb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb8dc6bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeba33b90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1
	[0061.786] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec51479d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec51479d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ce48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1
	[0061.786] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x468bdf3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x468bdf3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x468bdf3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1
	[0061.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x374c
	[0061.786] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.786] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d4ec4f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d4ec4f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d4ec4f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1
	[0061.786] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4297c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1
	[0061.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3750
	[0061.787] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.787] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1
	[0061.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3754
	[0061.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.788] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1
	[0061.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3758
	[0061.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.789] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1
	[0061.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x375c
	[0061.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.789] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1
	[0061.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3760
	[0061.790] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.790] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee75a612, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x143c68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1
	[0061.792] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0061.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3764
	[0061.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msotdintl.dll", cAlternateFileName="MSOTDI~1.DLL")) returned 1
	[0061.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msotelemetryintl.dll", cAlternateFileName="MSOTEL~1.DLL")) returned 1
	[0061.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1
	[0061.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3768
	[0061.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1
	[0061.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x376c
	[0061.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.794] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1
	[0061.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3770
	[0061.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.795] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1
	[0061.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3774
	[0061.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.796] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1
	[0061.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3778
	[0061.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.796] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f470, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1
	[0061.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x377c
	[0061.797] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.797] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1
	[0061.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3780
	[0061.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.798] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1
	[0061.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3784
	[0061.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.799] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1
	[0061.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3788
	[0061.799] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.799] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1
	[0061.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x378c
	[0061.800] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.800] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1
	[0061.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3790
	[0061.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.801] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1
	[0061.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3794
	[0061.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.802] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSRINTL.DLL", cAlternateFileName="")) returned 1
	[0061.802] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1
	[0061.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3798
	[0061.802] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.802] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1
	[0061.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x379c
	[0061.803] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.803] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1
	[0061.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37a0
	[0061.804] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.804] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1
	[0061.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37a4
	[0061.804] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.805] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd36584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd36584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe8a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1
	[0061.805] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1
	[0061.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37a8
	[0061.805] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.805] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1
	[0061.805] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1
	[0061.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37ac
	[0061.806] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.807] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f0a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1
	[0061.807] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officeinventoryagentfallback.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0061.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37b0
	[0061.807] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.807] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officeinventoryagentlogon.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0061.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37b4
	[0061.808] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.808] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1
	[0061.808] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d1cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1
	[0061.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37b8
	[0061.809] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.809] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1
	[0061.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37bc
	[0061.809] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.810] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1
	[0061.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37c0
	[0061.810] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.810] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bf5d95, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1
	[0061.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37c4
	[0061.813] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.813] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bf5d95, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1
	[0061.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37c8
	[0061.871] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.871] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcfce125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x499f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1
	[0061.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37cc
	[0061.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.872] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc774d49, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc774d49, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc774d49, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1
	[0061.872] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46d8311, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46d8311, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1
	[0061.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37d0
	[0061.873] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.873] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORGCHART.CHM", cAlternateFileName="")) returned 1
	[0061.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37d4
	[0061.874] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.874] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10880, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1
	[0061.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37d8
	[0061.874] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb490, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORGCINTL.DLL", cAlternateFileName="")) returned 1
	[0061.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46d8311, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46d8311, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1
	[0061.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37dc
	[0061.875] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.876] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x388a139, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x388a139, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x388a139, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13290, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1
	[0061.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37e0
	[0061.876] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.877] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1
	[0061.877] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1
	[0061.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37e4
	[0061.877] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.878] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x721a58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1
	[0061.878] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1467a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1
	[0061.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37e8
	[0061.878] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.879] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa538a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1
	[0061.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37ec
	[0061.879] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.880] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1
	[0061.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37f0
	[0061.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.881] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa25e3e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa25e3e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1
	[0061.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37f4
	[0061.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.882] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c1bf71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c1bf71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c42224, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1
	[0061.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37f8
	[0061.882] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.883] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c1bf71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c1bf71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa284551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1
	[0061.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37fc
	[0061.883] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.884] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1
	[0061.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3804
	[0061.886] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.886] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1
	[0061.886] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1
	[0061.886] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1
	[0061.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3808
	[0061.887] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.887] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1
	[0061.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x380c
	[0061.888] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.888] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e03f98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e03f98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e03f98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x39e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PE.VSL", cAlternateFileName="")) returned 1
	[0061.888] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3810
	[0061.889] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.889] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1
	[0061.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3814
	[0061.890] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.890] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3acdc360, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3acdc360, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b580a61, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x431068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1
	[0061.890] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d74ea0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d74ea0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d74ea0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1
	[0061.890] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70876, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1
	[0061.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3818
	[0061.891] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.891] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1
	[0061.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x381c
	[0061.891] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.892] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1
	[0061.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3820
	[0061.892] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.892] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1
	[0061.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3824
	[0061.893] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.893] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1
	[0061.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3828
	[0061.894] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.894] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7b75b6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7b75b6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x126048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1
	[0061.894] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4571e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEWTEMPLATE.POTX", cAlternateFileName="PREVIE~1.POT")) returned 1
	[0061.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x382c
	[0061.897] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.897] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d3e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEWTEMPLATE2.POTX", cAlternateFileName="PREVIE~2.POT")) returned 1
	[0061.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3830
	[0061.898] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.898] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x472474e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x472474e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x472474e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1
	[0061.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3834
	[0061.899] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.899] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2cc70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1
	[0061.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3838
	[0061.901] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.901] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2577485, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2577485, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2577485, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5c61, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROPRPT.VSSX", cAlternateFileName="PROPRP~1.VSS")) returned 1
	[0061.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x383c
	[0061.902] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.902] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefbeab61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefbeab61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefc5d1a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTOCOLHANDLERINTL.DLL", cAlternateFileName="PROTOC~1.DLL")) returned 1
	[0061.902] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1
	[0061.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3840
	[0061.903] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.903] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1
	[0061.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3844
	[0061.904] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.904] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1
	[0061.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3848
	[0061.905] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.905] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1
	[0061.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x384c
	[0061.906] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.906] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1
	[0061.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3850
	[0061.907] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.907] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1
	[0061.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3854
	[0061.908] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.908] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1
	[0061.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3858
	[0061.909] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.909] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1
	[0061.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x385c
	[0061.910] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.910] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa38f59d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa38f59d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3b57c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1
	[0061.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3860
	[0061.911] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.911] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1
	[0061.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3864
	[0061.912] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.912] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa4c084e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1
	[0061.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3868
	[0061.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.913] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc774d49, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc774d49, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde1fc09e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b3048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1
	[0061.913] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1
	[0061.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0061.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x386c
	[0061.914] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0061.915] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1
	[0061.915] SetLastError (dwErrCode=0x0) 
	[0061.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.915] GetLastError () returned 0x5
	[0061.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0061.915] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0061.915] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0062.002] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1
	[0062.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1
	[0062.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3874
	[0062.004] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.004] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1
	[0062.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3878
	[0062.004] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.005] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1
	[0062.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x387c
	[0062.005] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.005] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1
	[0062.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3880
	[0062.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.006] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1
	[0062.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3884
	[0062.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.007] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1
	[0062.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3888
	[0062.007] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.007] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1
	[0062.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x388c
	[0062.008] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.008] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1
	[0062.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3890
	[0062.008] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.009] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1
	[0062.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3894
	[0062.069] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.069] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1
	[0062.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3898
	[0062.069] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.070] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa4c084e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa4c084e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa50cd6f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1
	[0062.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x389c
	[0062.070] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.070] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1
	[0062.070] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38a0
	[0062.071] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.071] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1
	[0062.071] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38a4
	[0062.072] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.072] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab02bf1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1
	[0062.072] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38a8
	[0062.073] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.073] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1
	[0062.073] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38ac
	[0062.073] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.074] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1
	[0062.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38b0
	[0062.074] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.074] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1
	[0062.074] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38b4
	[0062.075] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.075] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1
	[0062.076] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38b8
	[0062.076] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.076] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1
	[0062.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38bc
	[0062.077] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.077] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1
	[0062.077] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38c0
	[0062.078] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.078] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1
	[0062.078] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38c4
	[0062.079] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.079] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1
	[0062.079] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38c8
	[0062.080] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.080] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1
	[0062.080] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38cc
	[0062.081] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.081] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1
	[0062.081] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38d0
	[0062.082] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.082] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1
	[0062.082] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38d4
	[0062.083] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.083] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1
	[0062.083] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38d8
	[0062.084] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.084] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1
	[0062.084] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38dc
	[0062.085] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.085] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1
	[0062.085] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38e0
	[0062.086] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.086] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1
	[0062.086] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38e4
	[0062.089] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.089] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1
	[0062.089] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38e8
	[0062.090] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.090] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1
	[0062.090] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38ec
	[0062.090] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.091] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1
	[0062.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38f0
	[0062.091] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.091] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1
	[0062.091] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38f4
	[0062.092] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.092] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1
	[0062.092] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38f8
	[0062.093] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.093] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1
	[0062.093] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38fc
	[0062.093] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.094] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1
	[0062.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3900
	[0062.094] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.094] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1
	[0062.094] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3904
	[0062.095] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.095] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1
	[0062.095] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3908
	[0062.096] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.096] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1
	[0062.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x390c
	[0062.096] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.097] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1
	[0062.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3910
	[0062.097] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.097] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1
	[0062.097] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3914
	[0062.098] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.098] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7c11d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1
	[0062.098] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3918
	[0062.099] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.099] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1
	[0062.099] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x391c
	[0062.100] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.100] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab9b4b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab9b4b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1
	[0062.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3920
	[0062.100] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.101] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1
	[0062.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3924
	[0062.101] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.101] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1
	[0062.101] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3928
	[0062.102] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.102] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1
	[0062.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x392c
	[0062.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.705] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1
	[0062.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3930
	[0062.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.706] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1
	[0062.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3934
	[0062.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.707] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1
	[0062.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3938
	[0062.707] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.707] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1
	[0062.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x393c
	[0062.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.708] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1
	[0062.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3940
	[0062.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.709] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1
	[0062.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3944
	[0062.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.710] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1
	[0062.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3948
	[0062.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.710] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1
	[0062.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x394c
	[0062.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.711] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0
	[0062.711] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0062.716] SetLastError (dwErrCode=0x0) 
	[0062.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.718] GetLastError () returned 0x5
	[0062.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0062.718] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0062.718] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0062.718] SetLastError (dwErrCode=0x0) 
	[0062.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.718] GetLastError () returned 0x5
	[0062.718] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0062.718] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0062.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0062.721] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.721] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x182b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAPERS.INI", cAlternateFileName="")) returned 1
	[0062.721] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bb5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR10F.GIF", cAlternateFileName="")) returned 1
	[0062.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3950
	[0062.722] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.722] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR11F.GIF", cAlternateFileName="")) returned 1
	[0062.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3954
	[0062.723] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.723] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46df, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR12F.GIF", cAlternateFileName="")) returned 1
	[0062.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3958
	[0062.724] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.724] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x430d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR13F.GIF", cAlternateFileName="")) returned 1
	[0062.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x395c
	[0062.725] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.725] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cb7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR14F.GIF", cAlternateFileName="")) returned 1
	[0062.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3960
	[0062.726] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.726] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR15F.GIF", cAlternateFileName="")) returned 1
	[0062.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3964
	[0062.727] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.727] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x399f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR16F.GIF", cAlternateFileName="")) returned 1
	[0062.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3968
	[0062.733] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.733] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR17F.GIF", cAlternateFileName="")) returned 1
	[0062.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x396c
	[0062.734] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.734] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR18F.GIF", cAlternateFileName="")) returned 1
	[0062.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3970
	[0062.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.735] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR19F.GIF", cAlternateFileName="")) returned 1
	[0062.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3974
	[0062.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.736] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR1B.GIF", cAlternateFileName="")) returned 1
	[0062.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3978
	[0062.736] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.736] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR1F.GIF", cAlternateFileName="")) returned 1
	[0062.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x397c
	[0062.737] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.737] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3408, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR20F.GIF", cAlternateFileName="")) returned 1
	[0062.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3980
	[0062.738] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.738] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR21F.GIF", cAlternateFileName="")) returned 1
	[0062.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3984
	[0062.738] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.739] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR22F.GIF", cAlternateFileName="")) returned 1
	[0062.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3988
	[0062.739] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.739] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x313b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR23F.GIF", cAlternateFileName="")) returned 1
	[0062.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x398c
	[0062.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.740] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR24F.GIF", cAlternateFileName="")) returned 1
	[0062.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3990
	[0062.741] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.741] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3187, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR25F.GIF", cAlternateFileName="")) returned 1
	[0062.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3994
	[0062.742] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.742] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1985, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR26F.GIF", cAlternateFileName="")) returned 1
	[0062.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3998
	[0062.743] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.743] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR27F.GIF", cAlternateFileName="")) returned 1
	[0062.743] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x399c
	[0062.751] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.752] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR28B.GIF", cAlternateFileName="")) returned 1
	[0062.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39a0
	[0062.752] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.752] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1786, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR28F.GIF", cAlternateFileName="")) returned 1
	[0062.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39a4
	[0062.753] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.753] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR29B.GIF", cAlternateFileName="")) returned 1
	[0062.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39a8
	[0062.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.754] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR29F.GIF", cAlternateFileName="")) returned 1
	[0062.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39ac
	[0062.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.755] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR2B.GIF", cAlternateFileName="")) returned 1
	[0062.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39b0
	[0062.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.755] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR2F.GIF", cAlternateFileName="")) returned 1
	[0062.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39b4
	[0062.756] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.756] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR30B.GIF", cAlternateFileName="")) returned 1
	[0062.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39b8
	[0062.757] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.757] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR30F.GIF", cAlternateFileName="")) returned 1
	[0062.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39bc
	[0062.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.758] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad3eea7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR31B.GIF", cAlternateFileName="")) returned 1
	[0062.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39c0
	[0062.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.759] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR31F.GIF", cAlternateFileName="")) returned 1
	[0062.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39c4
	[0062.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.846] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf47, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR32B.GIF", cAlternateFileName="")) returned 1
	[0062.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39c8
	[0062.847] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.847] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x910b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR32F.GIF", cAlternateFileName="")) returned 1
	[0062.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39cc
	[0062.847] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.848] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1631, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR33B.GIF", cAlternateFileName="")) returned 1
	[0062.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39d0
	[0062.849] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.849] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d13, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR33F.GIF", cAlternateFileName="")) returned 1
	[0062.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39d4
	[0062.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.850] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR34B.GIF", cAlternateFileName="")) returned 1
	[0062.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39d8
	[0062.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.851] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95dd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR34F.GIF", cAlternateFileName="")) returned 1
	[0062.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39dc
	[0062.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.851] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR35B.GIF", cAlternateFileName="")) returned 1
	[0062.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39e0
	[0062.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.852] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR35F.GIF", cAlternateFileName="")) returned 1
	[0062.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39e4
	[0062.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.853] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad3eea7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad3eea7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23e1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR36B.GIF", cAlternateFileName="")) returned 1
	[0062.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39e8
	[0062.854] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.854] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR36F.GIF", cAlternateFileName="")) returned 1
	[0062.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39ec
	[0062.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.855] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR37F.GIF", cAlternateFileName="")) returned 1
	[0062.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39f0
	[0062.856] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.856] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb819, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR38F.GIF", cAlternateFileName="")) returned 1
	[0062.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39f4
	[0062.857] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.857] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR39F.GIF", cAlternateFileName="")) returned 1
	[0062.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39f8
	[0062.858] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.858] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR3B.GIF", cAlternateFileName="")) returned 1
	[0062.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39fc
	[0062.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.859] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4647, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR3F.GIF", cAlternateFileName="")) returned 1
	[0062.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a00
	[0062.860] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.860] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f19, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR40F.GIF", cAlternateFileName="")) returned 1
	[0062.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a04
	[0062.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.861] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d5b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR41F.GIF", cAlternateFileName="")) returned 1
	[0062.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a08
	[0062.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.862] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf73, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR42F.GIF", cAlternateFileName="")) returned 1
	[0062.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a0c
	[0062.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.862] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad65103, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad65103, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad65103, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR43B.GIF", cAlternateFileName="")) returned 1
	[0062.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a10
	[0062.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.863] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR43F.GIF", cAlternateFileName="")) returned 1
	[0062.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a14
	[0062.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.864] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3606, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR44B.GIF", cAlternateFileName="")) returned 1
	[0062.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a18
	[0062.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.865] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3026, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR44F.GIF", cAlternateFileName="")) returned 1
	[0062.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a1c
	[0062.865] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.866] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2019, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR45B.GIF", cAlternateFileName="")) returned 1
	[0062.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a20
	[0062.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.866] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR45F.GIF", cAlternateFileName="")) returned 1
	[0062.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a24
	[0062.867] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.867] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1349, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR46B.GIF", cAlternateFileName="")) returned 1
	[0062.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a28
	[0062.868] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.868] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1377, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR46F.GIF", cAlternateFileName="")) returned 1
	[0062.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a2c
	[0062.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.880] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR47B.GIF", cAlternateFileName="")) returned 1
	[0062.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a30
	[0062.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.881] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR47F.GIF", cAlternateFileName="")) returned 1
	[0062.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a34
	[0062.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.881] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad8b362, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b53, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR48B.GIF", cAlternateFileName="")) returned 1
	[0062.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a38
	[0062.882] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.882] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR48F.GIF", cAlternateFileName="")) returned 1
	[0062.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a3c
	[0062.883] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.883] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR49B.GIF", cAlternateFileName="")) returned 1
	[0062.883] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a40
	[0062.884] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.884] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR49F.GIF", cAlternateFileName="")) returned 1
	[0062.884] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a44
	[0062.885] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.885] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a01, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR4B.GIF", cAlternateFileName="")) returned 1
	[0062.885] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a48
	[0062.885] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.886] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76cd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR4F.GIF", cAlternateFileName="")) returned 1
	[0062.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a4c
	[0062.886] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.886] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1001, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR50B.GIF", cAlternateFileName="")) returned 1
	[0062.886] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a50
	[0062.887] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.887] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR50F.GIF", cAlternateFileName="")) returned 1
	[0062.887] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a54
	[0062.888] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.888] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4217, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR51B.GIF", cAlternateFileName="")) returned 1
	[0062.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a58
	[0062.890] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.890] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16a1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR51F.GIF", cAlternateFileName="")) returned 1
	[0062.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a5c
	[0062.891] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.891] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad8b362, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad8b362, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR5B.GIF", cAlternateFileName="")) returned 1
	[0062.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a60
	[0062.892] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.892] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xce72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR5F.GIF", cAlternateFileName="")) returned 1
	[0062.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a64
	[0062.892] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.893] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24dd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR6B.GIF", cAlternateFileName="")) returned 1
	[0062.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a68
	[0062.893] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.893] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR6F.GIF", cAlternateFileName="")) returned 1
	[0062.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a6c
	[0062.894] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.894] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6054, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR7B.GIF", cAlternateFileName="")) returned 1
	[0062.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a70
	[0062.895] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.895] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR7F.GIF", cAlternateFileName="")) returned 1
	[0062.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a74
	[0062.895] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.896] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR8B.GIF", cAlternateFileName="")) returned 1
	[0062.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a78
	[0062.896] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.897] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2204, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR8F.GIF", cAlternateFileName="")) returned 1
	[0062.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a7c
	[0062.897] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.897] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadb15e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x445d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR9B.GIF", cAlternateFileName="")) returned 1
	[0062.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a80
	[0062.898] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.898] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5aec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PDIR9F.GIF", cAlternateFileName="")) returned 1
	[0062.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a84
	[0062.899] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0062.899] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadb15e3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadb15e3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x189e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPAPERS.INI", cAlternateFileName="")) returned 1
	[0062.899] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR00.GIF", cAlternateFileName="")) returned 1
	[0062.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0062.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a88
	[0063.226] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.226] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR10F.GIF", cAlternateFileName="")) returned 1
	[0063.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8c
	[0063.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.227] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1706, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR11F.GIF", cAlternateFileName="")) returned 1
	[0063.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a90
	[0063.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.229] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6499, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR12F.GIF", cAlternateFileName="")) returned 1
	[0063.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a94
	[0063.229] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.229] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR13F.GIF", cAlternateFileName="")) returned 1
	[0063.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a98
	[0063.230] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.230] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x645b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR14F.GIF", cAlternateFileName="")) returned 1
	[0063.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a9c
	[0063.231] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.231] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x452b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR15F.GIF", cAlternateFileName="")) returned 1
	[0063.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3aa0
	[0063.231] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.232] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fc1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR16F.GIF", cAlternateFileName="")) returned 1
	[0063.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3aa4
	[0063.232] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.232] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR17F.GIF", cAlternateFileName="")) returned 1
	[0063.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3aa8
	[0063.233] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.233] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR18F.GIF", cAlternateFileName="")) returned 1
	[0063.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3aac
	[0063.233] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.234] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR19F.GIF", cAlternateFileName="")) returned 1
	[0063.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ab0
	[0063.234] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.234] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR1B.GIF", cAlternateFileName="")) returned 1
	[0063.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ab4
	[0063.235] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.235] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b75, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR1F.GIF", cAlternateFileName="")) returned 1
	[0063.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ab8
	[0063.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.236] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR20F.GIF", cAlternateFileName="")) returned 1
	[0063.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3abc
	[0063.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.237] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR21F.GIF", cAlternateFileName="")) returned 1
	[0063.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac0
	[0063.237] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.237] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1983, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR22F.GIF", cAlternateFileName="")) returned 1
	[0063.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac4
	[0063.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.238] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR23F.GIF", cAlternateFileName="")) returned 1
	[0063.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac8
	[0063.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.239] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f61, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR24F.GIF", cAlternateFileName="")) returned 1
	[0063.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3acc
	[0063.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.239] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR25F.GIF", cAlternateFileName="")) returned 1
	[0063.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ad0
	[0063.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.240] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadd780c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadd780c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadd780c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR26F.GIF", cAlternateFileName="")) returned 1
	[0063.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ad4
	[0063.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.241] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR27F.GIF", cAlternateFileName="")) returned 1
	[0063.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ad8
	[0063.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.242] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR28F.GIF", cAlternateFileName="")) returned 1
	[0063.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3adc
	[0063.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.246] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1444, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR29F.GIF", cAlternateFileName="")) returned 1
	[0063.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ae0
	[0063.246] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.247] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR2B.GIF", cAlternateFileName="")) returned 1
	[0063.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ae4
	[0063.247] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.247] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR2F.GIF", cAlternateFileName="")) returned 1
	[0063.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ae8
	[0063.248] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.248] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x905a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR30F.GIF", cAlternateFileName="")) returned 1
	[0063.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3aec
	[0063.249] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.249] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR31F.GIF", cAlternateFileName="")) returned 1
	[0063.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3af0
	[0063.249] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.250] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9eb1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR32F.GIF", cAlternateFileName="")) returned 1
	[0063.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3af4
	[0063.250] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.250] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR33F.GIF", cAlternateFileName="")) returned 1
	[0063.250] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.251] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3af8
	[0063.251] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.251] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR34F.GIF", cAlternateFileName="")) returned 1
	[0063.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3afc
	[0063.252] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.252] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR35F.GIF", cAlternateFileName="")) returned 1
	[0063.252] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b00
	[0063.253] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.253] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x875e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR36F.GIF", cAlternateFileName="")) returned 1
	[0063.253] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b04
	[0063.253] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.254] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR37F.GIF", cAlternateFileName="")) returned 1
	[0063.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b08
	[0063.254] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.254] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcbc3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR38F.GIF", cAlternateFileName="")) returned 1
	[0063.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0c
	[0063.256] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.256] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR39F.GIF", cAlternateFileName="")) returned 1
	[0063.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b10
	[0063.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.257] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR3B.GIF", cAlternateFileName="")) returned 1
	[0063.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b14
	[0063.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.258] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR3F.GIF", cAlternateFileName="")) returned 1
	[0063.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b18
	[0063.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.259] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR40F.GIF", cAlternateFileName="")) returned 1
	[0063.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b1c
	[0063.260] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.261] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR41F.GIF", cAlternateFileName="")) returned 1
	[0063.261] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b20
	[0063.261] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.261] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xadfda74, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xadfda74, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xadfda74, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR42F.GIF", cAlternateFileName="")) returned 1
	[0063.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b24
	[0063.262] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.262] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR43B.GIF", cAlternateFileName="")) returned 1
	[0063.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b28
	[0063.263] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.263] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR43F.GIF", cAlternateFileName="")) returned 1
	[0063.263] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b2c
	[0063.264] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.264] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b06, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR44B.GIF", cAlternateFileName="")) returned 1
	[0063.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b30
	[0063.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.265] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a76, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR44F.GIF", cAlternateFileName="")) returned 1
	[0063.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b34
	[0063.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.266] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR45B.GIF", cAlternateFileName="")) returned 1
	[0063.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b38
	[0063.266] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.267] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16eb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR45F.GIF", cAlternateFileName="")) returned 1
	[0063.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b3c
	[0063.267] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.267] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1304, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR46B.GIF", cAlternateFileName="")) returned 1
	[0063.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b40
	[0063.268] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.268] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x141c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR46F.GIF", cAlternateFileName="")) returned 1
	[0063.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b44
	[0063.269] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.269] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7517, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR47B.GIF", cAlternateFileName="")) returned 1
	[0063.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b48
	[0063.270] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.270] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x539e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR47F.GIF", cAlternateFileName="")) returned 1
	[0063.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b4c
	[0063.270] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.271] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR48B.GIF", cAlternateFileName="")) returned 1
	[0063.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b50
	[0063.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.271] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR48F.GIF", cAlternateFileName="")) returned 1
	[0063.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b54
	[0063.272] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.272] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR49B.GIF", cAlternateFileName="")) returned 1
	[0063.272] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b58
	[0063.273] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.273] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b99, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR49F.GIF", cAlternateFileName="")) returned 1
	[0063.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b5c
	[0063.274] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.274] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fc2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR4B.GIF", cAlternateFileName="")) returned 1
	[0063.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b60
	[0063.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.392] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8edb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR4F.GIF", cAlternateFileName="")) returned 1
	[0063.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b64
	[0063.393] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.393] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR50B.GIF", cAlternateFileName="")) returned 1
	[0063.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b68
	[0063.394] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.394] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae23ccd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x117f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR50F.GIF", cAlternateFileName="")) returned 1
	[0063.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b6c
	[0063.395] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.395] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2395, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR51B.GIF", cAlternateFileName="")) returned 1
	[0063.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b70
	[0063.396] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.396] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae23ccd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae23ccd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1179, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR51F.GIF", cAlternateFileName="")) returned 1
	[0063.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b74
	[0063.397] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.397] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x592b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR5B.GIF", cAlternateFileName="")) returned 1
	[0063.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b78
	[0063.398] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.398] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR5F.GIF", cAlternateFileName="")) returned 1
	[0063.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b7c
	[0063.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.399] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ade, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR6B.GIF", cAlternateFileName="")) returned 1
	[0063.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b80
	[0063.403] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.403] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR6F.GIF", cAlternateFileName="")) returned 1
	[0063.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b84
	[0063.404] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.404] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5559, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR7B.GIF", cAlternateFileName="")) returned 1
	[0063.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b88
	[0063.405] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.405] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fdf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR7F.GIF", cAlternateFileName="")) returned 1
	[0063.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b8c
	[0063.406] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.406] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR8B.GIF", cAlternateFileName="")) returned 1
	[0063.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b90
	[0063.407] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.407] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR8F.GIF", cAlternateFileName="")) returned 1
	[0063.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b94
	[0063.408] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.408] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR9B.GIF", cAlternateFileName="")) returned 1
	[0063.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b98
	[0063.409] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.409] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 1
	[0063.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b9c
	[0063.411] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.411] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ZPDIR9F.GIF", cAlternateFileName="")) returned 0
	[0063.412] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0063.413] SetLastError (dwErrCode=0x0) 
	[0063.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.419] GetLastError () returned 0x5
	[0063.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0063.419] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.419] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0063.419] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf46b8986, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1
	[0063.419] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1
	[0063.419] SetLastError (dwErrCode=0x0) 
	[0063.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.419] GetLastError () returned 0x5
	[0063.419] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0063.419] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0063.422] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.422] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f51, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="basicelegant.dotx", cAlternateFileName="BASICE~1.DOT")) returned 1
	[0063.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ba0
	[0063.423] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.423] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fe8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="basicsimple.dotx", cAlternateFileName="BASICS~2.DOT")) returned 1
	[0063.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ba4
	[0063.424] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.424] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="basicstylish.dotx", cAlternateFileName="BASICS~1.DOT")) returned 1
	[0063.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ba8
	[0063.425] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f1d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bwcapitalized.dotx", cAlternateFileName="BWCAPI~1.DOT")) returned 1
	[0063.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bac
	[0063.426] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.427] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bwclassic.dotx", cAlternateFileName="BWCLAS~1.DOT")) returned 1
	[0063.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bb0
	[0063.427] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.428] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bwnumbered.dotx", cAlternateFileName="BWNUMB~1.DOT")) returned 1
	[0063.428] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bb4
	[0063.428] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.429] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f7b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="casual.dotx", cAlternateFileName="CASUAL~1.DOT")) returned 1
	[0063.429] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bb8
	[0063.430] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.430] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="centered.dotx", cAlternateFileName="CENTER~1.DOT")) returned 1
	[0063.430] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bbc
	[0063.432] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.432] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1
	[0063.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bc0
	[0063.433] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.433] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f43, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1
	[0063.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bc4
	[0063.434] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.434] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="linesdistinctive.dotx", cAlternateFileName="LINESD~1.DOT")) returned 1
	[0063.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bc8
	[0063.435] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.435] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f49, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="linessimple.dotx", cAlternateFileName="LINESS~1.DOT")) returned 1
	[0063.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bcc
	[0063.436] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.437] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="linesstylish.dotx", cAlternateFileName="LINESS~2.DOT")) returned 1
	[0063.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bd0
	[0063.437] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.438] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="minimalist.dotx", cAlternateFileName="MINIMA~1.DOT")) returned 1
	[0063.438] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="shaded.dotx", cAlternateFileName="SHADED~1.DOT")) returned 1
	[0063.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bd4
	[0063.438] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.439] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="word2013.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1
	[0063.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bd8
	[0063.440] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.440] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="word2013bw.dotx", cAlternateFileName="WORD20~2.DOT")) returned 1
	[0063.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bdc
	[0063.441] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.441] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="word2013bw.dotx", cAlternateFileName="WORD20~2.DOT")) returned 0
	[0063.441] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0063.442] SetLastError (dwErrCode=0x0) 
	[0063.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.444] GetLastError () returned 0x5
	[0063.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0063.444] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.444] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0063.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3870
	[0063.445] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.445] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1
	[0063.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.446] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3be0
	[0063.446] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.451] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1
	[0063.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3be4
	[0063.452] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.453] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1729263, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1
	[0063.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3be8
	[0063.454] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.454] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e1c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1
	[0063.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bec
	[0063.455] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.455] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1
	[0063.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bf0
	[0063.456] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.456] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETLANG_COL.HXT", cAlternateFileName="SETLAN~1.HXT")) returned 1
	[0063.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bf4
	[0063.457] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.458] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="SETLAN~2.HXK")) returned 1
	[0063.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bf8
	[0063.458] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.459] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="SETLAN~1.HXK")) returned 1
	[0063.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.459] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bfc
	[0063.460] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.460] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e8e3f2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2e8e3f2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1
	[0063.468] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x332cc84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x332cc84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x332cc84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc4b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1
	[0063.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c04
	[0063.469] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.469] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1
	[0063.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c08
	[0063.470] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.471] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe50d9a48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe50d9a48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efdc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB.HXS", cAlternateFileName="")) returned 1
	[0063.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c0c
	[0063.472] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.472] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea22, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_BASIC.HXS", cAlternateFileName="SKYPEF~1.HXS")) returned 1
	[0063.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c10
	[0063.473] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.473] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_BASIC_COL.HXC", cAlternateFileName="SKYPEF~2.HXC")) returned 1
	[0063.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c14
	[0063.474] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.475] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_BASIC_COL.HXT", cAlternateFileName="SKYPEF~2.HXT")) returned 1
	[0063.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c18
	[0063.475] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.476] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_BASIC_F_COL.HXK", cAlternateFileName="SKYPEF~2.HXK")) returned 1
	[0063.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c1c
	[0063.477] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.477] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_BASIC_K_COL.HXK", cAlternateFileName="SKYPEF~3.HXK")) returned 1
	[0063.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c20
	[0063.482] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.482] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_COL.HXC", cAlternateFileName="SKYPEF~1.HXC")) returned 1
	[0063.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c24
	[0063.483] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.484] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_COL.HXT", cAlternateFileName="SKYPEF~1.HXT")) returned 1
	[0063.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c28
	[0063.485] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.485] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_F_COL.HXK", cAlternateFileName="SKYPEF~4.HXK")) returned 1
	[0063.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c2c
	[0063.486] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.486] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_K_COL.HXK", cAlternateFileName="SKYPEF~1.HXK")) returned 1
	[0063.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c30
	[0063.487] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.487] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e5f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINE.HXS", cAlternateFileName="SKYPEF~3.HXS")) returned 1
	[0063.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c34
	[0063.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.488] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f484, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINEG.HXS", cAlternateFileName="SKYPEF~2.HXS")) returned 1
	[0063.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c38
	[0063.489] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.490] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINEG_COL.HXC", cAlternateFileName="SKYPEF~3.HXC")) returned 1
	[0063.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c3c
	[0063.491] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.491] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINEG_COL.HXT", cAlternateFileName="SKYPEF~4.HXT")) returned 1
	[0063.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c40
	[0063.492] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.492] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINEG_F_COL.HXK", cAlternateFileName="SK7EA9~1.HXK")) returned 1
	[0063.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c44
	[0063.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.709] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINEG_K_COL.HXK", cAlternateFileName="SK002E~1.HXK")) returned 1
	[0063.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c48
	[0063.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.710] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINE_COL.HXC", cAlternateFileName="SKYPEF~4.HXC")) returned 1
	[0063.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c4c
	[0063.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.711] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINE_COL.HXT", cAlternateFileName="SKYPEF~3.HXT")) returned 1
	[0063.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c50
	[0063.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.711] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINE_F_COL.HXK", cAlternateFileName="SKCB23~1.HXK")) returned 1
	[0063.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c54
	[0063.713] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.713] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKYPEFB_ONLINE_K_COL.HXK", cAlternateFileName="SKCD34~1.HXK")) returned 1
	[0063.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c58
	[0063.713] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.713] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1
	[0063.714] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b480, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1
	[0063.714] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1
	[0063.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c5c
	[0063.714] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.714] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1
	[0063.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c60
	[0063.715] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.715] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1
	[0063.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c64
	[0063.715] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.716] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1
	[0063.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c68
	[0063.716] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.716] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1
	[0063.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c6c
	[0063.717] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.717] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x160d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1
	[0063.717] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4796e84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1
	[0063.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c70
	[0063.721] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4796e84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1
	[0063.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c74
	[0063.722] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.722] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc197, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TelemetryDashboard.xltx", cAlternateFileName="TELEME~2.XLT")) returned 1
	[0063.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c78
	[0063.723] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.723] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9420, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TelemetryLog.xltx", cAlternateFileName="TELEME~1.XLT")) returned 1
	[0063.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c7c
	[0063.725] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.725] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d638, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeAccess.nrr", cAlternateFileName="TEF284~1.NRR")) returned 1
	[0063.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c80
	[0063.726] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.726] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5dff8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeExcel.nrr", cAlternateFileName="TELLME~4.NRR")) returned 1
	[0063.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c84
	[0063.726] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.727] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOneNote.nrr", cAlternateFileName="TELLME~1.NRR")) returned 1
	[0063.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c88
	[0063.727] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.727] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30430, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlook.nrr", cAlternateFileName="TE1C01~1.NRR")) returned 1
	[0063.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c8c
	[0063.728] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.728] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d9c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookAddr.nrr", cAlternateFileName="TELLME~3.NRR")) returned 1
	[0063.728] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c90
	[0063.729] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.729] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x448f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookAppt.nrr", cAlternateFileName="TELLME~2.NRR")) returned 1
	[0063.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c94
	[0063.730] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.730] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x456d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookMail.nrr", cAlternateFileName="TE1EEB~1.NRR")) returned 1
	[0063.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c98
	[0063.730] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.730] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookMailRead.nrr", cAlternateFileName="TE33EB~1.NRR")) returned 1
	[0063.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c9c
	[0063.731] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.731] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fdb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookMeetingReqRead.nrr", cAlternateFileName="TE0A80~1.NRR")) returned 1
	[0063.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ca0
	[0063.732] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.732] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f7c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookMeetingReqSend.nrr", cAlternateFileName="TEA8CF~1.NRR")) returned 1
	[0063.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ca4
	[0063.732] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.733] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeOutlookTask.nrr", cAlternateFileName="TE5BFE~1.NRR")) returned 1
	[0063.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ca8
	[0063.733] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.733] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bb4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMePowerPoint.nrr", cAlternateFileName="TEAA78~1.NRR")) returned 1
	[0063.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cac
	[0063.734] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.734] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8ee092, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b8ee092, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8ee092, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x4894c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeProject.nrr", cAlternateFileName="TE4F27~1.NRR")) returned 1
	[0063.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cb0
	[0063.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.735] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x47bd0fa, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x47bd0fa, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x47bd0fa, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x34adc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeVisio.nrr", cAlternateFileName="TE7B47~1.NRR")) returned 1
	[0063.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cb4
	[0063.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.736] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fa74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TellMeWord.nrr", cAlternateFileName="TEC8DE~1.NRR")) returned 1
	[0063.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cb8
	[0063.736] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.736] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x47e33aa, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x47e33aa, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x47e33aa, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1
	[0063.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cbc
	[0063.737] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.737] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18ccc9d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5a850, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1
	[0063.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc0
	[0063.738] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.738] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UcAddinRes.dll", cAlternateFileName="UCADDI~1.DLL")) returned 1
	[0063.738] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UccApiRes.dll", cAlternateFileName="UCCAPI~1.DLL")) returned 1
	[0063.738] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UmOutlookStrings.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0063.738] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4809621, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4809621, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4809621, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x74c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VALVE.VRD", cAlternateFileName="")) returned 1
	[0063.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc4
	[0063.739] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.739] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f3541d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f3541d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f3541d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISBRRES.DLL", cAlternateFileName="")) returned 1
	[0063.739] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19d7f1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x19d7f1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x19fdec5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISCOLOR.VSL", cAlternateFileName="")) returned 1
	[0063.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc8
	[0063.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.740] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18ccc9d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xcd8c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISINTL.DLL", cAlternateFileName="")) returned 1
	[0063.740] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4809621, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4809621, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4809621, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO.CSS", cAlternateFileName="")) returned 1
	[0063.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ccc
	[0063.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.740] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38d65f7, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x38d65f7, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4809621, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4b7b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO.HXS", cAlternateFileName="")) returned 1
	[0063.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cd0
	[0063.741] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.741] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_COL.HXC", cAlternateFileName="VISIO_~1.HXC")) returned 1
	[0063.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cd4
	[0063.742] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.742] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_COL.HXT", cAlternateFileName="VISIO_~1.HXT")) returned 1
	[0063.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cd8
	[0063.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.791] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_F_COL.HXK", cAlternateFileName="VISIO_~1.HXK")) returned 1
	[0063.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cdc
	[0063.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.792] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_K_COL.HXK", cAlternateFileName="VISIO_~2.HXK")) returned 1
	[0063.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ce0
	[0063.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8506c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b8506c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x215ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_PRM.HXS", cAlternateFileName="VISIO_~2.HXS")) returned 1
	[0063.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ce4
	[0063.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.794] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_PRM_COL.HXC", cAlternateFileName="VISIO_~2.HXC")) returned 1
	[0063.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ce8
	[0063.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.795] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_PRM_COL.HXT", cAlternateFileName="VISIO_~2.HXT")) returned 1
	[0063.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cec
	[0063.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.796] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_PRM_F_COL.HXK", cAlternateFileName="VISIO_~3.HXK")) returned 1
	[0063.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cf0
	[0063.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.797] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x482f84d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x482f84d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_PRM_K_COL.HXK", cAlternateFileName="VISIO_~4.HXK")) returned 1
	[0063.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cf4
	[0063.797] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.798] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x290acd1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x290acd1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4b7ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_STD.HXS", cAlternateFileName="VISIO_~1.HXS")) returned 1
	[0063.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cf8
	[0063.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.798] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_STD_COL.HXC", cAlternateFileName="VISIO_~3.HXC")) returned 1
	[0063.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cfc
	[0063.799] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.799] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_STD_COL.HXT", cAlternateFileName="VISIO_~3.HXT")) returned 1
	[0063.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d00
	[0063.800] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.800] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_STD_F_COL.HXK", cAlternateFileName="VIB8A9~1.HXK")) returned 1
	[0063.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d04
	[0063.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.801] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO_STD_K_COL.HXK", cAlternateFileName="VI5545~1.HXK")) returned 1
	[0063.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d08
	[0063.802] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.802] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3437c9a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3437c9a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3437c9a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xec50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUTILS.VSL", cAlternateFileName="")) returned 1
	[0063.802] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d0c
	[0063.803] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.803] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x364ddb2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x364ddb2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x364ddb2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x12e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISWEB.VSL", cAlternateFileName="")) returned 1
	[0063.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d10
	[0063.804] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.804] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1
	[0063.804] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x794, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WDALLLNK.VRD", cAlternateFileName="")) returned 1
	[0063.804] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WDCMPVRD.XML", cAlternateFileName="")) returned 1
	[0063.804] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d14
	[0063.805] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.805] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x487bc7b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x487bc7b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x487bc7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x722, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WDERRLNK.VRD", cAlternateFileName="")) returned 1
	[0063.805] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b580a61, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b580a61, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x5eeb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ.HXS", cAlternateFileName="")) returned 1
	[0063.805] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d18
	[0063.805] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.807] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_COL.HXC", cAlternateFileName="WINPRO~2.HXC")) returned 1
	[0063.807] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d1c
	[0063.808] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.808] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_COL.HXT", cAlternateFileName="WINPRO~1.HXT")) returned 1
	[0063.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d20
	[0063.809] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.809] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_F_COL.HXK", cAlternateFileName="WINPRO~3.HXK")) returned 1
	[0063.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d24
	[0063.810] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.810] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_K_COL.HXK", cAlternateFileName="WINPRO~1.HXK")) returned 1
	[0063.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d28
	[0063.811] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.811] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b6d7fcc, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b6d7fcc, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x5eeea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_STD.HXS", cAlternateFileName="WINPRO~1.HXS")) returned 1
	[0063.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d2c
	[0063.812] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.812] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_STD_COL.HXC", cAlternateFileName="WINPRO~1.HXC")) returned 1
	[0063.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d30
	[0063.813] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.813] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_STD_COL.HXT", cAlternateFileName="WINPRO~2.HXT")) returned 1
	[0063.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d34
	[0063.814] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.814] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_STD_F_COL.HXK", cAlternateFileName="WINPRO~2.HXK")) returned 1
	[0063.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d38
	[0063.815] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.815] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINPROJ_STD_K_COL.HXK", cAlternateFileName="WINPRO~4.HXK")) returned 1
	[0063.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d3c
	[0063.816] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.817] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x487bc7b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x487bc7b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x487bc7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINSCHD.VRD", cAlternateFileName="")) returned 1
	[0063.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d40
	[0063.817] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINWORD.HXS", cAlternateFileName="")) returned 1
	[0063.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d44
	[0063.818] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.818] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINWORD_COL.HXC", cAlternateFileName="WINWOR~1.HXC")) returned 1
	[0063.818] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d48
	[0063.819] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.819] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINWORD_COL.HXT", cAlternateFileName="WINWOR~1.HXT")) returned 1
	[0063.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d4c
	[0063.929] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.929] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINWORD_F_COL.HXK", cAlternateFileName="WINWOR~2.HXK")) returned 1
	[0063.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d50
	[0063.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.930] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINWORD_K_COL.HXK", cAlternateFileName="WINWOR~1.HXK")) returned 1
	[0063.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d54
	[0063.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.930] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd8a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WORKFLOW.VSL", cAlternateFileName="")) returned 1
	[0063.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d58
	[0063.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.932] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbbaa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WWINTL.DLL", cAlternateFileName="")) returned 1
	[0063.932] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0442ead, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0442ead, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0442ead, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wxpr.dll", cAlternateFileName="")) returned 1
	[0063.932] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x28e4acd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x28e4acd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x28e4acd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="XFUNC.VSL", cAlternateFileName="")) returned 1
	[0063.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d5c
	[0063.933] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.933] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ba3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Xlate_Complete.xsn", cAlternateFileName="XLATE_~2.XSN")) returned 1
	[0063.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d60
	[0063.933] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.933] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30eb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Xlate_Init.xsn", cAlternateFileName="XLATE_~1.XSN")) returned 1
	[0063.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d64
	[0063.934] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.934] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc576616a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd958a7d7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1041ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="XLINTL32.DLL", cAlternateFileName="")) returned 1
	[0063.934] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="XLLEX.DLL", cAlternateFileName="")) returned 1
	[0063.934] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="XLMACRO.CHM", cAlternateFileName="")) returned 1
	[0063.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d68
	[0063.935] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.935] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefccf8e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefccf8e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2dc60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 1
	[0063.935] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefccf8e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefccf8e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2dc60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="XLSLICER.DLL", cAlternateFileName="")) returned 0
	[0063.935] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0063.935] SetLastError (dwErrCode=0x0) 
	[0063.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.935] GetLastError () returned 0x5
	[0063.935] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.936] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.936] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1036", cAlternateFileName="")) returned 1
	[0063.936] SetLastError (dwErrCode=0x0) 
	[0063.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.936] GetLastError () returned 0x5
	[0063.936] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.936] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0063.937] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.937] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa9b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0063.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d6c
	[0063.938] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.938] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa9b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0
	[0063.938] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0063.938] SetLastError (dwErrCode=0x0) 
	[0063.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.938] GetLastError () returned 0x5
	[0063.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.938] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.938] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3082", cAlternateFileName="")) returned 1
	[0063.938] SetLastError (dwErrCode=0x0) 
	[0063.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.939] GetLastError () returned 0x5
	[0063.939] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.939] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0063.939] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.939] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1
	[0063.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d70
	[0063.940] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.940] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0
	[0063.940] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0063.940] SetLastError (dwErrCode=0x0) 
	[0063.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.940] GetLastError () returned 0x5
	[0063.940] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.940] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.940] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0063.940] SetLastError (dwErrCode=0x0) 
	[0063.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.941] GetLastError () returned 0x5
	[0063.941] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.941] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.941] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0063.941] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.941] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1
	[0063.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d74
	[0063.942] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.942] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1
	[0063.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d78
	[0063.942] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.943] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1
	[0063.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d7c
	[0063.943] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.943] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0
	[0063.944] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0063.944] SetLastError (dwErrCode=0x0) 
	[0063.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.944] GetLastError () returned 0x5
	[0063.944] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.944] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.944] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0063.944] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1
	[0063.944] SetLastError (dwErrCode=0x0) 
	[0063.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.944] GetLastError () returned 0x5
	[0063.944] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.944] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.944] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0063.946] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.946] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12a6aa07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x606000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1
	[0063.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d80
	[0063.947] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.947] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12a447be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12a447be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1303a658, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="ACWZLI~1.ACC")) returned 1
	[0063.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d84
	[0063.947] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.948] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12fc801f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12fc801f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1
	[0063.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d88
	[0063.948] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.948] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13086ac2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13086ac2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf6000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1
	[0063.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d8c
	[0063.949] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.949] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1330f2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1330f2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x344000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1
	[0063.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d90
	[0063.950] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.950] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1335b74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1
	[0063.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d94
	[0063.951] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.951] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1335b74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 0
	[0063.951] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0063.952] SetLastError (dwErrCode=0x0) 
	[0063.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.953] GetLastError () returned 0x5
	[0063.953] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.954] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe107a061, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe15188c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91aa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADDINS", cAlternateFileName="")) returned 1
	[0063.954] SetLastError (dwErrCode=0x0) 
	[0063.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.954] GetLastError () returned 0x5
	[0063.954] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0063.954] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1
	[0063.954] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1
	[0063.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0063.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d98
	[0063.955] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0063.955] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Power Query for Excel Integrated", cAlternateFileName="MICROS~1")) returned 1
	[0063.955] SetLastError (dwErrCode=0x0) 
	[0063.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.955] GetLastError () returned 0x5
	[0063.955] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0063.955] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.955] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0063.956] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.956] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bin", cAlternateFileName="")) returned 1
	[0063.956] SetLastError (dwErrCode=0x0) 
	[0063.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.956] GetLastError () returned 0x5
	[0063.956] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0063.956] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0063.956] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.956] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ar", cAlternateFileName="")) returned 1
	[0063.956] SetLastError (dwErrCode=0x0) 
	[0063.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.956] GetLastError () returned 0x5
	[0063.956] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.956] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.956] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0063.957] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.957] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.957] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2caa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.957] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.957] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.957] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0063.957] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0063.958] SetLastError (dwErrCode=0x0) 
	[0063.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.960] GetLastError () returned 0x5
	[0063.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.960] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.960] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="bg", cAlternateFileName="")) returned 1
	[0063.960] SetLastError (dwErrCode=0x0) 
	[0063.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.960] GetLastError () returned 0x5
	[0063.960] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.960] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.960] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0063.962] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.963] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.963] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.963] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.963] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.963] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0063.963] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0063.963] SetLastError (dwErrCode=0x0) 
	[0063.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.965] GetLastError () returned 0x5
	[0063.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.965] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.965] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ca", cAlternateFileName="")) returned 1
	[0063.965] SetLastError (dwErrCode=0x0) 
	[0063.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.965] GetLastError () returned 0x5
	[0063.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.965] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.965] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0063.967] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.967] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.967] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.967] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.967] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.967] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0063.967] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0063.968] SetLastError (dwErrCode=0x0) 
	[0063.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.969] GetLastError () returned 0x5
	[0063.969] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.969] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.969] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="cs", cAlternateFileName="")) returned 1
	[0063.969] SetLastError (dwErrCode=0x0) 
	[0063.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.969] GetLastError () returned 0x5
	[0063.969] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.970] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0063.971] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.971] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.971] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf134fca5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.972] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.972] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.972] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0063.972] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0063.972] SetLastError (dwErrCode=0x0) 
	[0063.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.974] GetLastError () returned 0x5
	[0063.974] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.974] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.974] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="da", cAlternateFileName="")) returned 1
	[0063.974] SetLastError (dwErrCode=0x0) 
	[0063.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.974] GetLastError () returned 0x5
	[0063.974] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.974] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0063.981] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.981] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.981] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.981] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.981] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.981] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0063.981] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0063.982] SetLastError (dwErrCode=0x0) 
	[0063.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.984] GetLastError () returned 0x5
	[0063.984] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.985] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.985] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="de", cAlternateFileName="")) returned 1
	[0063.985] SetLastError (dwErrCode=0x0) 
	[0063.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.985] GetLastError () returned 0x5
	[0063.985] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.985] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.985] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0063.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf003cf13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0063.986] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0063.987] SetLastError (dwErrCode=0x0) 
	[0063.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.989] GetLastError () returned 0x5
	[0063.990] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.990] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.990] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1
	[0063.990] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="el", cAlternateFileName="")) returned 1
	[0063.990] SetLastError (dwErrCode=0x0) 
	[0063.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.990] GetLastError () returned 0x5
	[0063.990] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.990] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0063.992] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.992] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.992] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.992] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.992] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.992] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0063.992] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0063.993] SetLastError (dwErrCode=0x0) 
	[0063.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.996] GetLastError () returned 0x5
	[0063.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.996] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.996] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="es", cAlternateFileName="")) returned 1
	[0063.996] SetLastError (dwErrCode=0x0) 
	[0063.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.996] GetLastError () returned 0x5
	[0063.996] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0063.996] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.996] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0063.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0063.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0063.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0063.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0063.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0063.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0063.998] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0063.999] SetLastError (dwErrCode=0x0) 
	[0063.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.001] GetLastError () returned 0x5
	[0064.001] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.001] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.001] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="et", cAlternateFileName="")) returned 1
	[0064.001] SetLastError (dwErrCode=0x0) 
	[0064.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.002] GetLastError () returned 0x5
	[0064.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.002] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.002] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.003] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.003] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.004] SetLastError (dwErrCode=0x0) 
	[0064.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.006] GetLastError () returned 0x5
	[0064.006] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.006] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.006] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="eu", cAlternateFileName="")) returned 1
	[0064.006] SetLastError (dwErrCode=0x0) 
	[0064.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.007] GetLastError () returned 0x5
	[0064.007] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.007] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.007] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.012] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.012] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.012] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.012] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.012] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.012] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.012] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.013] SetLastError (dwErrCode=0x0) 
	[0064.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.016] GetLastError () returned 0x5
	[0064.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.016] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.016] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1
	[0064.016] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="fi", cAlternateFileName="")) returned 1
	[0064.016] SetLastError (dwErrCode=0x0) 
	[0064.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.016] GetLastError () returned 0x5
	[0064.016] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.016] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.016] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc0d0
	[0064.017] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.017] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.017] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.017] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.017] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.017] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.017] FindClose (in: hFindFile=0x274bd1fc0d0 | out: hFindFile=0x274bd1fc0d0) returned 1
	[0064.018] SetLastError (dwErrCode=0x0) 
	[0064.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.021] GetLastError () returned 0x5
	[0064.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.021] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.021] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="fr", cAlternateFileName="")) returned 1
	[0064.021] SetLastError (dwErrCode=0x0) 
	[0064.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.021] GetLastError () returned 0x5
	[0064.021] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.021] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.021] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.022] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.022] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.022] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.022] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.022] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.022] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.022] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.023] SetLastError (dwErrCode=0x0) 
	[0064.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.026] GetLastError () returned 0x5
	[0064.026] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.026] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.026] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="gl", cAlternateFileName="")) returned 1
	[0064.026] SetLastError (dwErrCode=0x0) 
	[0064.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.026] GetLastError () returned 0x5
	[0064.026] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.026] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.026] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0064.027] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.027] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.027] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.027] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x675bda6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.027] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.027] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.028] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0064.028] SetLastError (dwErrCode=0x0) 
	[0064.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.031] GetLastError () returned 0x5
	[0064.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.031] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.031] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="he", cAlternateFileName="")) returned 1
	[0064.031] SetLastError (dwErrCode=0x0) 
	[0064.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.031] GetLastError () returned 0x5
	[0064.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.031] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.035] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.035] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.035] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.035] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x37aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.035] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.035] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.035] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.036] SetLastError (dwErrCode=0x0) 
	[0064.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.037] GetLastError () returned 0x5
	[0064.037] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.037] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="hi", cAlternateFileName="")) returned 1
	[0064.038] SetLastError (dwErrCode=0x0) 
	[0064.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.038] GetLastError () returned 0x5
	[0064.038] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.038] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.038] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0064.038] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.039] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.039] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.039] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.039] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.039] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.039] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0064.039] SetLastError (dwErrCode=0x0) 
	[0064.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.042] GetLastError () returned 0x5
	[0064.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.042] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="hr", cAlternateFileName="")) returned 1
	[0064.042] SetLastError (dwErrCode=0x0) 
	[0064.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.042] GetLastError () returned 0x5
	[0064.042] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.042] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.042] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0064.043] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.043] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.043] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.043] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.043] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.043] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.043] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0064.044] SetLastError (dwErrCode=0x0) 
	[0064.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.045] GetLastError () returned 0x5
	[0064.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.045] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="hu", cAlternateFileName="")) returned 1
	[0064.045] SetLastError (dwErrCode=0x0) 
	[0064.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.045] GetLastError () returned 0x5
	[0064.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0064.047] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.047] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.047] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.047] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.047] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.047] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.047] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0064.048] SetLastError (dwErrCode=0x0) 
	[0064.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.049] GetLastError () returned 0x5
	[0064.049] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.049] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.049] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="id", cAlternateFileName="")) returned 1
	[0064.049] SetLastError (dwErrCode=0x0) 
	[0064.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.050] GetLastError () returned 0x5
	[0064.050] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.050] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0064.051] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.051] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.051] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.051] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.051] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.052] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.052] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0064.052] SetLastError (dwErrCode=0x0) 
	[0064.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.054] GetLastError () returned 0x5
	[0064.054] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.054] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.054] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="it", cAlternateFileName="")) returned 1
	[0064.054] SetLastError (dwErrCode=0x0) 
	[0064.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.054] GetLastError () returned 0x5
	[0064.054] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.054] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.054] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0064.127] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.127] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.127] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.127] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6270fd0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.127] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.127] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.127] FindClose (in: hFindFile=0x274bd1fc010 | out: hFindFile=0x274bd1fc010) returned 1
	[0064.128] SetLastError (dwErrCode=0x0) 
	[0064.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.129] GetLastError () returned 0x5
	[0064.129] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.129] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.129] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ja", cAlternateFileName="")) returned 1
	[0064.129] SetLastError (dwErrCode=0x0) 
	[0064.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.130] GetLastError () returned 0x5
	[0064.130] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.130] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.130] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.130] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.130] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.131] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.131] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.131] SetLastError (dwErrCode=0x0) 
	[0064.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.133] GetLastError () returned 0x5
	[0064.133] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.133] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.133] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="kk", cAlternateFileName="")) returned 1
	[0064.133] SetLastError (dwErrCode=0x0) 
	[0064.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.133] GetLastError () returned 0x5
	[0064.133] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.133] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbfb0
	[0064.135] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.135] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.135] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.135] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.135] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.135] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.136] FindClose (in: hFindFile=0x274bd1fbfb0 | out: hFindFile=0x274bd1fbfb0) returned 1
	[0064.136] SetLastError (dwErrCode=0x0) 
	[0064.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.138] GetLastError () returned 0x5
	[0064.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.138] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.138] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ko", cAlternateFileName="")) returned 1
	[0064.138] SetLastError (dwErrCode=0x0) 
	[0064.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.138] GetLastError () returned 0x5
	[0064.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.138] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4b0be25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4b0be25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c3d17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.139] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.140] SetLastError (dwErrCode=0x0) 
	[0064.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.142] GetLastError () returned 0x5
	[0064.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.142] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.142] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="lt", cAlternateFileName="")) returned 1
	[0064.142] SetLastError (dwErrCode=0x0) 
	[0064.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.142] GetLastError () returned 0x5
	[0064.142] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.142] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.143] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.143] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc97147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc97147, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.143] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.143] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.143] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.144] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.144] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.144] SetLastError (dwErrCode=0x0) 
	[0064.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.146] GetLastError () returned 0x5
	[0064.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.146] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.146] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="lv", cAlternateFileName="")) returned 1
	[0064.146] SetLastError (dwErrCode=0x0) 
	[0064.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.146] GetLastError () returned 0x5
	[0064.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.147] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.147] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.147] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59f29de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.147] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.148] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.148] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.148] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.148] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.148] SetLastError (dwErrCode=0x0) 
	[0064.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.150] GetLastError () returned 0x5
	[0064.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.150] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa08b8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Data.Edm.NetFX35.dll", cAlternateFileName="MIE429~1.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1610c0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Data.OData.NetFX35.dll", cAlternateFileName="MI37F8~1.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c068, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Data.OData.Query.NetFX35.dll", cAlternateFileName="MI8F9F~1.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112040, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Exchange.WebServices.dll", cAlternateFileName="MIE0C3~1.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x217840, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Client.Excel.dll", cAlternateFileName="MI0E0A~1.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Client.Excel.EditorRibbon.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32a8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Client.Initialization.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Client.Models.dll", cAlternateFileName="MIC507~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcfa9f2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcfa9f2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23a5040, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Client.Windows.dll", cAlternateFileName="MI7BEA~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb91216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Container.exe", cAlternateFileName="MICROS~2.EXE")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92201bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5070, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Container.NetFX40.exe", cAlternateFileName="MICROS~3.EXE")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6de953e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Container.NetFX45.exe", cAlternateFileName="MICROS~1.EXE")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e0ea8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Document.dll", cAlternateFileName="MI8E0B~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2040, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Document.XmlSerializers.dll", cAlternateFileName="MI7AD6~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.OAuth.dll", cAlternateFileName="MIADE9~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4704e3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4704e3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.OleDbInterop.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13240, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.OleDbProvider.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6ea9118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6ea9118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f640, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.ScriptDom.dll", cAlternateFileName="MIC995~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Mashup.Storage.XmlSerializers.dll", cAlternateFileName="MID814~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x481440, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.MashupEngine.dll", cAlternateFileName="MIE629~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x73ee48, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x73ee48, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14dac0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.OData.Core.NetFX35.dll", cAlternateFileName="MIDAD6~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8058, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.OData.Edm.NetFX35.dll", cAlternateFileName="MIF00B~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b058, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xedac0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Office.Interop.Outlook.dll", cAlternateFileName="MIDB50~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e4b8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.Spatial.NetFX35.dll", cAlternateFileName="MI069E~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0a8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Microsoft.WindowsAzure.StorageClient.dll", cAlternateFileName="MI3285~1.DLL")) returned 1
	[0064.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ms", cAlternateFileName="")) returned 1
	[0064.151] SetLastError (dwErrCode=0x0) 
	[0064.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.151] GetLastError () returned 0x5
	[0064.151] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.151] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.151] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.152] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.152] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.152] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.152] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.152] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.152] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.152] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.153] SetLastError (dwErrCode=0x0) 
	[0064.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.155] GetLastError () returned 0x5
	[0064.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.155] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="nl", cAlternateFileName="")) returned 1
	[0064.155] SetLastError (dwErrCode=0x0) 
	[0064.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.156] GetLastError () returned 0x5
	[0064.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.156] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.157] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.157] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.157] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.157] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.157] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.157] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.157] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.158] SetLastError (dwErrCode=0x0) 
	[0064.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.160] GetLastError () returned 0x5
	[0064.160] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.160] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.160] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="no", cAlternateFileName="")) returned 1
	[0064.160] SetLastError (dwErrCode=0x0) 
	[0064.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.160] GetLastError () returned 0x5
	[0064.160] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.160] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.161] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.161] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.161] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.161] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.161] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.161] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.161] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.162] SetLastError (dwErrCode=0x0) 
	[0064.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.164] GetLastError () returned 0x5
	[0064.164] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.164] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.164] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="Office.dll", cAlternateFileName="")) returned 1
	[0064.164] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="pl", cAlternateFileName="")) returned 1
	[0064.164] SetLastError (dwErrCode=0x0) 
	[0064.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.164] GetLastError () returned 0x5
	[0064.164] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.164] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.166] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.166] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.166] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.166] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.166] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.166] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.166] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.167] SetLastError (dwErrCode=0x0) 
	[0064.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.169] GetLastError () returned 0x5
	[0064.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.169] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.169] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0064.169] SetLastError (dwErrCode=0x0) 
	[0064.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.169] GetLastError () returned 0x5
	[0064.169] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.169] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0064.171] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.171] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.171] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.171] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.171] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.171] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.171] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0064.172] SetLastError (dwErrCode=0x0) 
	[0064.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.174] GetLastError () returned 0x5
	[0064.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.174] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.174] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="pt-pt", cAlternateFileName="")) returned 1
	[0064.174] SetLastError (dwErrCode=0x0) 
	[0064.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.174] GetLastError () returned 0x5
	[0064.174] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.174] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.177] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.177] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc72b8a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.177] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.177] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.177] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.177] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.177] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.178] SetLastError (dwErrCode=0x0) 
	[0064.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.180] GetLastError () returned 0x5
	[0064.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.180] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.180] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ro", cAlternateFileName="")) returned 1
	[0064.180] SetLastError (dwErrCode=0x0) 
	[0064.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.180] GetLastError () returned 0x5
	[0064.180] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.180] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.181] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.181] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.181] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.181] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.181] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.181] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.181] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.182] SetLastError (dwErrCode=0x0) 
	[0064.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.184] GetLastError () returned 0x5
	[0064.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.184] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.184] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="ru", cAlternateFileName="")) returned 1
	[0064.184] SetLastError (dwErrCode=0x0) 
	[0064.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.184] GetLastError () returned 0x5
	[0064.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.185] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc070
	[0064.185] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.185] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.185] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.186] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfbd422, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3daa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.186] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.186] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.186] FindClose (in: hFindFile=0x274bd1fc070 | out: hFindFile=0x274bd1fc070) returned 1
	[0064.186] SetLastError (dwErrCode=0x0) 
	[0064.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.188] GetLastError () returned 0x5
	[0064.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.188] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.188] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sk", cAlternateFileName="")) returned 1
	[0064.189] SetLastError (dwErrCode=0x0) 
	[0064.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.189] GetLastError () returned 0x5
	[0064.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.189] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.191] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69be349, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69be349, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.191] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.191] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.192] SetLastError (dwErrCode=0x0) 
	[0064.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.194] GetLastError () returned 0x5
	[0064.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.194] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.194] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sl", cAlternateFileName="")) returned 1
	[0064.194] SetLastError (dwErrCode=0x0) 
	[0064.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.194] GetLastError () returned 0x5
	[0064.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.194] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.195] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.195] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.195] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.196] SetLastError (dwErrCode=0x0) 
	[0064.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.198] GetLastError () returned 0x5
	[0064.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.198] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1
	[0064.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sr-Cyrl", cAlternateFileName="")) returned 1
	[0064.198] SetLastError (dwErrCode=0x0) 
	[0064.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.198] GetLastError () returned 0x5
	[0064.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.198] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.199] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.199] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.199] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.199] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.200] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.200] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.200] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.200] SetLastError (dwErrCode=0x0) 
	[0064.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.202] GetLastError () returned 0x5
	[0064.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.202] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.202] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sr-Latn", cAlternateFileName="")) returned 1
	[0064.202] SetLastError (dwErrCode=0x0) 
	[0064.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.202] GetLastError () returned 0x5
	[0064.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.202] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0064.203] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.203] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.203] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.203] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b14875, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b14875, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.203] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.203] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.203] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0064.204] SetLastError (dwErrCode=0x0) 
	[0064.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.206] GetLastError () returned 0x5
	[0064.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.206] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.206] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0064.206] SetLastError (dwErrCode=0x0) 
	[0064.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.206] GetLastError () returned 0x5
	[0064.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.206] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0064.208] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.208] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.208] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.208] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.208] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.208] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0
	[0064.208] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0064.209] SetLastError (dwErrCode=0x0) 
	[0064.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.210] GetLastError () returned 0x5
	[0064.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.210] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="sv", cAlternateFileName="")) returned 1
	[0064.210] SetLastError (dwErrCode=0x0) 
	[0064.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.211] GetLastError () returned 0x5
	[0064.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.211] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.211] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.211] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa25d2ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.212] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.212] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.212] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.212] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.212] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.212] SetLastError (dwErrCode=0x0) 
	[0064.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.214] GetLastError () returned 0x5
	[0064.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.214] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.214] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0064.214] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bea0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="System.Web.Mvc.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1
	[0064.214] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="th", cAlternateFileName="")) returned 1
	[0064.214] SetLastError (dwErrCode=0x0) 
	[0064.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.214] GetLastError () returned 0x5
	[0064.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.214] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.215] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.216] SetLastError (dwErrCode=0x0) 
	[0064.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.218] GetLastError () returned 0x5
	[0064.218] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.218] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.218] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="tr", cAlternateFileName="")) returned 1
	[0064.218] SetLastError (dwErrCode=0x0) 
	[0064.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.218] GetLastError () returned 0x5
	[0064.218] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.218] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.219] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.219] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.219] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x402b37e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x402b37e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4110038, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.219] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.219] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.219] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.219] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.219] SetLastError (dwErrCode=0x0) 
	[0064.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.221] GetLastError () returned 0x5
	[0064.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.221] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.221] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="uk", cAlternateFileName="")) returned 1
	[0064.221] SetLastError (dwErrCode=0x0) 
	[0064.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.221] GetLastError () returned 0x5
	[0064.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.221] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2faa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.223] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.224] SetLastError (dwErrCode=0x0) 
	[0064.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.225] GetLastError () returned 0x5
	[0064.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.225] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.225] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="vi", cAlternateFileName="")) returned 1
	[0064.225] SetLastError (dwErrCode=0x0) 
	[0064.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.226] GetLastError () returned 0x5
	[0064.226] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.226] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0064.227] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.227] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.227] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.227] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.227] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.227] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0064.227] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0064.229] SetLastError (dwErrCode=0x0) 
	[0064.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.230] GetLastError () returned 0x5
	[0064.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.230] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.230] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="zh-HANS", cAlternateFileName="")) returned 1
	[0064.230] SetLastError (dwErrCode=0x0) 
	[0064.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.230] GetLastError () returned 0x5
	[0064.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.231] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.231] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0
	[0064.231] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.232] SetLastError (dwErrCode=0x0) 
	[0064.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.234] GetLastError () returned 0x5
	[0064.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.234] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="zh-HANT", cAlternateFileName="")) returned 1
	[0064.234] SetLastError (dwErrCode=0x0) 
	[0064.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.234] GetLastError () returned 0x5
	[0064.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0064.235] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.235] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.235] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c1f8d1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.235] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.235] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.235] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0
	[0064.235] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0064.235] SetLastError (dwErrCode=0x0) 
	[0064.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.237] GetLastError () returned 0x5
	[0064.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0064.237] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7b5a0, cFileName="zh-HANT", cAlternateFileName="")) returned 0
	[0064.237] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0064.237] SetLastError (dwErrCode=0x0) 
	[0064.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.237] GetLastError () returned 0x5
	[0064.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.237] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.237] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bin", cAlternateFileName="")) returned 0
	[0064.237] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0064.237] SetLastError (dwErrCode=0x0) 
	[0064.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.237] GetLastError () returned 0x5
	[0064.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0064.238] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.238] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0064.238] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1
	[0064.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d9c
	[0064.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.238] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1
	[0064.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3da0
	[0064.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.239] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="otkloadr_x64.dll", cAlternateFileName="OTKLOA~1.DLL")) returned 1
	[0064.239] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1
	[0064.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3da4
	[0064.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.240] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1
	[0064.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3da8
	[0064.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.241] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1
	[0064.241] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1
	[0064.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dac
	[0064.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.241] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Power Map Excel Add-in", cAlternateFileName="POWERM~1")) returned 1
	[0064.241] SetLastError (dwErrCode=0x0) 
	[0064.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.242] GetLastError () returned 0x5
	[0064.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0064.242] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0064.242] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.242] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATATRANSFORMERWRAPPER.DLL", cAlternateFileName="DATATR~1.DLL")) returned 1
	[0064.242] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42270, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCELPLUGINCORE.DLL", cAlternateFileName="EXCELP~3.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1354e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCELPLUGINDATAPROVIDER.DLL", cAlternateFileName="EXCELP~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCELPLUGINSHELL.DLL", cAlternateFileName="EXCELP~2.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31a898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POWERMAPCLASSIFICATION.DLL", cAlternateFileName="POWERM~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2662a44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2662a44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f072e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONCHART.DLL", cAlternateFileName="VISUAL~2.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONCHARTCOMMON.DLL", cAlternateFileName="VISUAL~4.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf280, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONCOMMON.DLL", cAlternateFileName="VISUAL~3.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x291680, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONCONTROL.DLL", cAlternateFileName="VISUAL~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3085a99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3085a99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea8c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONDIRECTX.DLL", cAlternateFileName="VIA2F6~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONENGINE.DLL", cAlternateFileName="VI323F~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISUALIZATIONGRAPHICS.DLL", cAlternateFileName="VIF07A~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 1
	[0064.243] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 0
	[0064.243] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0064.244] SetLastError (dwErrCode=0x0) 
	[0064.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power map excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.245] GetLastError () returned 0x5
	[0064.245] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0064.245] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.245] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1
	[0064.245] SetLastError (dwErrCode=0x0) 
	[0064.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.246] GetLastError () returned 0x5
	[0064.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0064.246] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0064.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ar", cAlternateFileName="")) returned 1
	[0064.246] SetLastError (dwErrCode=0x0) 
	[0064.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.246] GetLastError () returned 0x5
	[0064.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.246] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.247] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.247] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.247] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.247] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x78b299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x78b299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.247] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.247] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3db8
	[0064.248] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.248] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.248] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.249] SetLastError (dwErrCode=0x0) 
	[0064.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.250] GetLastError () returned 0x5
	[0064.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.250] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.250] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bg", cAlternateFileName="")) returned 1
	[0064.250] SetLastError (dwErrCode=0x0) 
	[0064.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.250] GetLastError () returned 0x5
	[0064.250] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.250] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.250] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0064.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dbc
	[0064.252] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.252] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.252] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0064.253] SetLastError (dwErrCode=0x0) 
	[0064.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.254] GetLastError () returned 0x5
	[0064.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.254] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.254] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1
	[0064.254] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3db4
	[0064.255] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.255] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ca", cAlternateFileName="")) returned 1
	[0064.255] SetLastError (dwErrCode=0x0) 
	[0064.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.256] GetLastError () returned 0x5
	[0064.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.256] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.256] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dc4
	[0064.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.258] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.258] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.259] SetLastError (dwErrCode=0x0) 
	[0064.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.261] GetLastError () returned 0x5
	[0064.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.261] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.261] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cs", cAlternateFileName="")) returned 1
	[0064.261] SetLastError (dwErrCode=0x0) 
	[0064.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.261] GetLastError () returned 0x5
	[0064.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.261] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.262] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.262] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.262] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.262] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.262] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.262] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dc8
	[0064.263] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.263] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.263] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.264] SetLastError (dwErrCode=0x0) 
	[0064.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.265] GetLastError () returned 0x5
	[0064.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.265] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.265] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="da", cAlternateFileName="")) returned 1
	[0064.265] SetLastError (dwErrCode=0x0) 
	[0064.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.266] GetLastError () returned 0x5
	[0064.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.266] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc0d0
	[0064.268] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.268] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.268] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.268] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.268] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.268] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dcc
	[0064.269] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.269] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.269] FindClose (in: hFindFile=0x274bd1fc0d0 | out: hFindFile=0x274bd1fc0d0) returned 1
	[0064.270] SetLastError (dwErrCode=0x0) 
	[0064.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.272] GetLastError () returned 0x5
	[0064.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.272] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.272] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="de", cAlternateFileName="")) returned 1
	[0064.272] SetLastError (dwErrCode=0x0) 
	[0064.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.273] GetLastError () returned 0x5
	[0064.273] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.273] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.273] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.273] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.274] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4eb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.274] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.274] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.274] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.274] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.274] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.274] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dd0
	[0064.275] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.275] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.275] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.276] SetLastError (dwErrCode=0x0) 
	[0064.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.278] GetLastError () returned 0x5
	[0064.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.278] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.278] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="el", cAlternateFileName="")) returned 1
	[0064.278] SetLastError (dwErrCode=0x0) 
	[0064.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.278] GetLastError () returned 0x5
	[0064.278] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.278] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.278] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.279] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.279] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dd4
	[0064.280] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.281] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.281] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.281] SetLastError (dwErrCode=0x0) 
	[0064.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.283] GetLastError () returned 0x5
	[0064.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.283] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.283] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es", cAlternateFileName="")) returned 1
	[0064.283] SetLastError (dwErrCode=0x0) 
	[0064.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.283] GetLastError () returned 0x5
	[0064.283] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.283] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.283] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x153fdb85, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.285] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.285] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.285] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dd8
	[0064.286] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.286] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.286] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.287] SetLastError (dwErrCode=0x0) 
	[0064.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.289] GetLastError () returned 0x5
	[0064.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.289] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.289] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="et", cAlternateFileName="")) returned 1
	[0064.289] SetLastError (dwErrCode=0x0) 
	[0064.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.289] GetLastError () returned 0x5
	[0064.289] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.289] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0064.290] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.290] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.290] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.290] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.290] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc72b8a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc72b8a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.291] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.291] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ddc
	[0064.292] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.292] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.292] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0064.293] SetLastError (dwErrCode=0x0) 
	[0064.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.295] GetLastError () returned 0x5
	[0064.295] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.295] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.295] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eu", cAlternateFileName="")) returned 1
	[0064.295] SetLastError (dwErrCode=0x0) 
	[0064.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.296] GetLastError () returned 0x5
	[0064.296] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.296] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.297] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.297] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c5d9c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c5d9c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.297] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.297] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.297] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.297] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.297] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3de0
	[0064.298] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.298] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.298] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.299] SetLastError (dwErrCode=0x0) 
	[0064.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.301] GetLastError () returned 0x5
	[0064.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.301] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.301] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fi", cAlternateFileName="")) returned 1
	[0064.301] SetLastError (dwErrCode=0x0) 
	[0064.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.301] GetLastError () returned 0x5
	[0064.301] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.301] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.301] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13977942, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.302] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.302] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3de4
	[0064.303] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.303] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.303] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.304] SetLastError (dwErrCode=0x0) 
	[0064.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.305] GetLastError () returned 0x5
	[0064.305] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.306] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.306] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr", cAlternateFileName="")) returned 1
	[0064.311] SetLastError (dwErrCode=0x0) 
	[0064.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.312] GetLastError () returned 0x5
	[0064.312] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.312] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.313] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.313] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.313] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.313] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.313] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.313] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.313] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3de8
	[0064.314] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.314] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.314] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.315] SetLastError (dwErrCode=0x0) 
	[0064.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.317] GetLastError () returned 0x5
	[0064.317] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.317] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.317] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="gl", cAlternateFileName="")) returned 1
	[0064.317] SetLastError (dwErrCode=0x0) 
	[0064.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.318] GetLastError () returned 0x5
	[0064.318] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.318] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.318] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.322] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.322] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.322] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.322] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.322] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.322] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.323] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.323] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dec
	[0064.323] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.324] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.324] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.324] SetLastError (dwErrCode=0x0) 
	[0064.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.326] GetLastError () returned 0x5
	[0064.326] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.326] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.327] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="he", cAlternateFileName="")) returned 1
	[0064.327] SetLastError (dwErrCode=0x0) 
	[0064.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.327] GetLastError () returned 0x5
	[0064.327] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.327] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.327] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.328] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.328] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13bb3be0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.328] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.328] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.328] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61b1409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61b1409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.328] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.328] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3df0
	[0064.329] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.329] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.329] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.329] SetLastError (dwErrCode=0x0) 
	[0064.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.331] GetLastError () returned 0x5
	[0064.331] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.331] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.331] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hi", cAlternateFileName="")) returned 1
	[0064.331] SetLastError (dwErrCode=0x0) 
	[0064.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.332] GetLastError () returned 0x5
	[0064.332] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.332] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.332] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.332] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.332] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.332] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.333] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.333] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.333] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3df4
	[0064.333] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.333] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.333] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.334] SetLastError (dwErrCode=0x0) 
	[0064.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.336] GetLastError () returned 0x5
	[0064.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.336] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.336] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hr", cAlternateFileName="")) returned 1
	[0064.336] SetLastError (dwErrCode=0x0) 
	[0064.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.336] GetLastError () returned 0x5
	[0064.336] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.337] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.337] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0064.338] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14268686, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.338] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.338] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3df8
	[0064.339] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.339] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.339] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0064.340] SetLastError (dwErrCode=0x0) 
	[0064.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.342] GetLastError () returned 0x5
	[0064.342] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.342] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.342] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hu", cAlternateFileName="")) returned 1
	[0064.342] SetLastError (dwErrCode=0x0) 
	[0064.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.343] GetLastError () returned 0x5
	[0064.343] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.343] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.344] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.344] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.344] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.344] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.344] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x575324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.344] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dfc
	[0064.345] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.345] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.345] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.346] SetLastError (dwErrCode=0x0) 
	[0064.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.348] GetLastError () returned 0x5
	[0064.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.348] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.348] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="id", cAlternateFileName="")) returned 1
	[0064.348] SetLastError (dwErrCode=0x0) 
	[0064.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.348] GetLastError () returned 0x5
	[0064.348] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.348] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.349] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.349] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.349] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.349] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.349] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.349] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e00
	[0064.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.350] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.350] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.351] SetLastError (dwErrCode=0x0) 
	[0064.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.353] GetLastError () returned 0x5
	[0064.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.353] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.353] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="it", cAlternateFileName="")) returned 1
	[0064.353] SetLastError (dwErrCode=0x0) 
	[0064.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.353] GetLastError () returned 0x5
	[0064.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.353] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.354] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.354] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6840bbc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6840bbc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.354] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.354] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.354] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf964b3dd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.354] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e04
	[0064.355] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.355] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.355] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.356] SetLastError (dwErrCode=0x0) 
	[0064.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.358] GetLastError () returned 0x5
	[0064.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.358] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.358] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja", cAlternateFileName="")) returned 1
	[0064.358] SetLastError (dwErrCode=0x0) 
	[0064.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.358] GetLastError () returned 0x5
	[0064.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.358] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0064.359] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.359] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1498f816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.359] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.359] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.359] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.359] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e08
	[0064.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.360] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.360] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0064.361] SetLastError (dwErrCode=0x0) 
	[0064.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.363] GetLastError () returned 0x5
	[0064.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.363] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.363] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kk", cAlternateFileName="")) returned 1
	[0064.363] SetLastError (dwErrCode=0x0) 
	[0064.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.363] GetLastError () returned 0x5
	[0064.363] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.363] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.364] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.364] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14bf1c4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.364] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.364] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.364] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.364] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e0c
	[0064.365] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.365] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.365] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.366] SetLastError (dwErrCode=0x0) 
	[0064.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.368] GetLastError () returned 0x5
	[0064.368] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.368] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.368] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ko", cAlternateFileName="")) returned 1
	[0064.368] SetLastError (dwErrCode=0x0) 
	[0064.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.373] GetLastError () returned 0x5
	[0064.373] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.373] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.374] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e10
	[0064.375] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.375] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.375] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.376] SetLastError (dwErrCode=0x0) 
	[0064.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.378] GetLastError () returned 0x5
	[0064.378] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.378] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.378] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lt", cAlternateFileName="")) returned 1
	[0064.378] SetLastError (dwErrCode=0x0) 
	[0064.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.379] GetLastError () returned 0x5
	[0064.379] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.379] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.379] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.380] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.380] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc42c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.380] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.380] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.380] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.380] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e14
	[0064.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.381] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.381] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.382] SetLastError (dwErrCode=0x0) 
	[0064.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.384] GetLastError () returned 0x5
	[0064.384] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.384] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.384] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lv", cAlternateFileName="")) returned 1
	[0064.384] SetLastError (dwErrCode=0x0) 
	[0064.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.385] GetLastError () returned 0x5
	[0064.385] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.385] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.385] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.386] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.386] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.386] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.386] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.386] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.386] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e18
	[0064.387] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.387] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.387] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.388] SetLastError (dwErrCode=0x0) 
	[0064.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.390] GetLastError () returned 0x5
	[0064.390] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.390] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.390] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.390] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", cAlternateFileName="MICROS~1.XAP")) returned 1
	[0064.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dc0
	[0064.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Reporting.Common.dll", cAlternateFileName="MIB9B1~1.DLL")) returned 1
	[0064.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.dll", cAlternateFileName="MID48A~1.DLL")) returned 1
	[0064.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf710, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Authorization.dll", cAlternateFileName="MIBBB9~1.DLL")) returned 1
	[0064.392] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1
	[0064.392] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7641936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7641936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5556e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ProgressiveProcessing.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.392] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ms", cAlternateFileName="")) returned 1
	[0064.392] SetLastError (dwErrCode=0x0) 
	[0064.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.392] GetLastError () returned 0x5
	[0064.392] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.392] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.393] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.393] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.393] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.393] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.393] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.393] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e20
	[0064.394] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.394] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.394] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.395] SetLastError (dwErrCode=0x0) 
	[0064.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.397] GetLastError () returned 0x5
	[0064.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.397] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.397] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nl", cAlternateFileName="")) returned 1
	[0064.397] SetLastError (dwErrCode=0x0) 
	[0064.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.397] GetLastError () returned 0x5
	[0064.397] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.397] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.398] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.398] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.398] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.398] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.398] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1920897, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.398] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e24
	[0064.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.400] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.400] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.401] SetLastError (dwErrCode=0x0) 
	[0064.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.403] GetLastError () returned 0x5
	[0064.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.403] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="no", cAlternateFileName="")) returned 1
	[0064.403] SetLastError (dwErrCode=0x0) 
	[0064.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.403] GetLastError () returned 0x5
	[0064.403] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.404] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.405] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.405] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.405] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.405] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.405] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.405] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e28
	[0064.406] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.407] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.407] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.407] SetLastError (dwErrCode=0x0) 
	[0064.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.409] GetLastError () returned 0x5
	[0064.409] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.410] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.410] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pl", cAlternateFileName="")) returned 1
	[0064.410] SetLastError (dwErrCode=0x0) 
	[0064.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.410] GetLastError () returned 0x5
	[0064.410] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.410] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.411] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.411] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.411] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.411] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.411] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.411] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e2c
	[0064.412] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.412] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.412] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.413] SetLastError (dwErrCode=0x0) 
	[0064.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.416] GetLastError () returned 0x5
	[0064.416] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.416] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.416] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt", cAlternateFileName="")) returned 1
	[0064.416] SetLastError (dwErrCode=0x0) 
	[0064.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.417] GetLastError () returned 0x5
	[0064.417] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.417] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.417] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0064.419] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.419] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1624bdaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.419] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.419] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.419] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.419] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e30
	[0064.420] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.420] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.420] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0064.421] SetLastError (dwErrCode=0x0) 
	[0064.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.423] GetLastError () returned 0x5
	[0064.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.423] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.423] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0064.423] SetLastError (dwErrCode=0x0) 
	[0064.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.423] GetLastError () returned 0x5
	[0064.423] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.423] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.424] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.425] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e34
	[0064.426] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.427] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.427] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.428] SetLastError (dwErrCode=0x0) 
	[0064.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.430] GetLastError () returned 0x5
	[0064.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.430] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.430] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ro", cAlternateFileName="")) returned 1
	[0064.430] SetLastError (dwErrCode=0x0) 
	[0064.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.430] GetLastError () returned 0x5
	[0064.430] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.430] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.432] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.432] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.432] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.432] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.432] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98ae9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.432] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e38
	[0064.433] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.434] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.434] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.434] SetLastError (dwErrCode=0x0) 
	[0064.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.436] GetLastError () returned 0x5
	[0064.436] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.436] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.436] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ru", cAlternateFileName="")) returned 1
	[0064.437] SetLastError (dwErrCode=0x0) 
	[0064.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.437] GetLastError () returned 0x5
	[0064.437] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.437] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0064.438] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.438] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.438] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.438] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.438] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.438] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e3c
	[0064.441] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.442] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.442] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0064.442] SetLastError (dwErrCode=0x0) 
	[0064.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.444] GetLastError () returned 0x5
	[0064.444] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.445] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.445] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sk", cAlternateFileName="")) returned 1
	[0064.445] SetLastError (dwErrCode=0x0) 
	[0064.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.445] GetLastError () returned 0x5
	[0064.445] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.445] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.445] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0064.446] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.446] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e40
	[0064.447] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.447] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.447] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0064.448] SetLastError (dwErrCode=0x0) 
	[0064.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.450] GetLastError () returned 0x5
	[0064.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.450] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.450] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sl", cAlternateFileName="")) returned 1
	[0064.450] SetLastError (dwErrCode=0x0) 
	[0064.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.450] GetLastError () returned 0x5
	[0064.450] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.451] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.451] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.452] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4868, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.452] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.452] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e44
	[0064.453] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.453] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.454] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.454] SetLastError (dwErrCode=0x0) 
	[0064.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.456] GetLastError () returned 0x5
	[0064.456] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.456] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.456] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1
	[0064.456] SetLastError (dwErrCode=0x0) 
	[0064.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.457] GetLastError () returned 0x5
	[0064.457] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.457] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.458] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.458] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1600fa20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.458] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.458] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.458] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.458] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e48
	[0064.459] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.459] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.459] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.460] SetLastError (dwErrCode=0x0) 
	[0064.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.462] GetLastError () returned 0x5
	[0064.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.462] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.462] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0064.462] SetLastError (dwErrCode=0x0) 
	[0064.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.463] GetLastError () returned 0x5
	[0064.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.463] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.464] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.464] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.464] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.465] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.465] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.465] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e4c
	[0064.465] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.466] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.466] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.467] SetLastError (dwErrCode=0x0) 
	[0064.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.468] GetLastError () returned 0x5
	[0064.468] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.468] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.469] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0064.469] SetLastError (dwErrCode=0x0) 
	[0064.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.469] GetLastError () returned 0x5
	[0064.469] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.469] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15f50e21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e50
	[0064.471] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.471] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.471] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.472] SetLastError (dwErrCode=0x0) 
	[0064.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.474] GetLastError () returned 0x5
	[0064.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.474] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.474] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sv", cAlternateFileName="")) returned 1
	[0064.474] SetLastError (dwErrCode=0x0) 
	[0064.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.474] GetLastError () returned 0x5
	[0064.474] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.474] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.474] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.476] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.476] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ab8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.476] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.476] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.476] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.476] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e54
	[0064.477] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.478] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.478] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.478] SetLastError (dwErrCode=0x0) 
	[0064.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.480] GetLastError () returned 0x5
	[0064.480] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.480] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.481] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="th", cAlternateFileName="")) returned 1
	[0064.481] SetLastError (dwErrCode=0x0) 
	[0064.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.481] GetLastError () returned 0x5
	[0064.481] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.481] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.481] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.482] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.482] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161b33fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.482] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.482] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.482] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81bae82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81bae82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.482] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e58
	[0064.483] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.483] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.483] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.484] SetLastError (dwErrCode=0x0) 
	[0064.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.486] GetLastError () returned 0x5
	[0064.486] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.486] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.486] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tr", cAlternateFileName="")) returned 1
	[0064.486] SetLastError (dwErrCode=0x0) 
	[0064.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.486] GetLastError () returned 0x5
	[0064.487] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.487] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.489] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.489] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4458, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.489] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x514e0d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x514e0d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ab8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.489] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.489] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4910, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.489] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6f2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e5c
	[0064.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.490] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.490] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.491] SetLastError (dwErrCode=0x0) 
	[0064.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.493] GetLastError () returned 0x5
	[0064.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.493] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.493] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="uk", cAlternateFileName="")) returned 1
	[0064.493] SetLastError (dwErrCode=0x0) 
	[0064.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.493] GetLastError () returned 0x5
	[0064.493] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.494] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.494] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.495] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.495] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48cfa7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48cfa7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16546d20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.495] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.495] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.495] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.495] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d72970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e60
	[0064.496] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.496] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.496] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.497] SetLastError (dwErrCode=0x0) 
	[0064.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.499] GetLastError () returned 0x5
	[0064.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.499] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.499] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vi", cAlternateFileName="")) returned 1
	[0064.499] SetLastError (dwErrCode=0x0) 
	[0064.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.499] GetLastError () returned 0x5
	[0064.499] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.499] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbe90
	[0064.500] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.500] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.500] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.500] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.501] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d76040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e64
	[0064.503] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.503] FindNextFileW (in: hFindFile=0x274bd1fbe90, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.503] FindClose (in: hFindFile=0x274bd1fbe90 | out: hFindFile=0x274bd1fbe90) returned 1
	[0064.504] SetLastError (dwErrCode=0x0) 
	[0064.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.506] GetLastError () returned 0x5
	[0064.506] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.506] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.506] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0064.506] SetLastError (dwErrCode=0x0) 
	[0064.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.506] GetLastError () returned 0x5
	[0064.506] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.506] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.508] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.508] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0ab8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.508] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.508] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.508] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.508] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.509] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d79710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e68
	[0064.509] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.509] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.510] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.510] SetLastError (dwErrCode=0x0) 
	[0064.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.512] GetLastError () returned 0x5
	[0064.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.512] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.512] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0064.512] SetLastError (dwErrCode=0x0) 
	[0064.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.513] GetLastError () returned 0x5
	[0064.513] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.513] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.514] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.514] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1
	[0064.514] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.514] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.514] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.514] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1
	[0064.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d7cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e6c
	[0064.515] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.515] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0
	[0064.515] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.516] SetLastError (dwErrCode=0x0) 
	[0064.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.518] GetLastError () returned 0x5
	[0064.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.518] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.518] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0064.518] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0064.518] SetLastError (dwErrCode=0x0) 
	[0064.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.518] GetLastError () returned 0x5
	[0064.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0064.519] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.519] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1
	[0064.519] SetLastError (dwErrCode=0x0) 
	[0064.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.519] GetLastError () returned 0x5
	[0064.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0064.519] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0064.519] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.519] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ar", cAlternateFileName="")) returned 1
	[0064.519] SetLastError (dwErrCode=0x0) 
	[0064.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.519] GetLastError () returned 0x5
	[0064.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.520] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.520] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0064.520] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.521] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d804b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e70
	[0064.521] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc3e44f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc3e44f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.522] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.523] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0064.523] SetLastError (dwErrCode=0x0) 
	[0064.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.526] GetLastError () returned 0x5
	[0064.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.526] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.526] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bg", cAlternateFileName="")) returned 1
	[0064.526] SetLastError (dwErrCode=0x0) 
	[0064.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.526] GetLastError () returned 0x5
	[0064.526] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.526] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.526] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.527] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.528] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1639, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d83b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e74
	[0064.529] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.529] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa13ab7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fed144, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.530] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.530] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.531] SetLastError (dwErrCode=0x0) 
	[0064.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.533] GetLastError () returned 0x5
	[0064.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.533] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.533] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ca", cAlternateFileName="")) returned 1
	[0064.533] SetLastError (dwErrCode=0x0) 
	[0064.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.533] GetLastError () returned 0x5
	[0064.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.533] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0064.534] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.534] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16605845, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d87250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e78
	[0064.535] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56ab5a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56ab5a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5d437d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5d437d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x519a5bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa31be8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa31be8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4733b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.536] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa31be8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa31be8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4733b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.536] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0064.537] SetLastError (dwErrCode=0x0) 
	[0064.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.539] GetLastError () returned 0x5
	[0064.539] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.539] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.539] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0064.539] SetLastError (dwErrCode=0x0) 
	[0064.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.540] GetLastError () returned 0x5
	[0064.540] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.540] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.542] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.542] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16546d20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16546d20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0064.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.542] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e7c
	[0064.543] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.543] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0064.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8dff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e80
	[0064.544] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.545] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1
	[0064.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d916c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e84
	[0064.546] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.546] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hive.xsl", cAlternateFileName="")) returned 1
	[0064.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d94d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e88
	[0064.547] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.548] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0064.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d98460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8c
	[0064.548] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.549] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0064.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e90
	[0064.550] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.550] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1
	[0064.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e94
	[0064.551] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.551] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0064.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da28d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e98
	[0064.552] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.553] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0064.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da5fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e9c
	[0064.553] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.554] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16736b69, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16736b69, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0064.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ea0
	[0064.555] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.555] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16677f4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16677f4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x166ea6b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1
	[0064.555] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.555] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ea4
	[0064.953] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.954] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x166ea6b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x166ea6b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0064.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ea8
	[0064.954] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.955] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1
	[0064.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3eac
	[0064.955] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.955] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0
	[0064.955] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.956] SetLastError (dwErrCode=0x0) 
	[0064.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.958] GetLastError () returned 0x5
	[0064.958] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.958] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.958] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cs", cAlternateFileName="")) returned 1
	[0064.958] SetLastError (dwErrCode=0x0) 
	[0064.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.958] GetLastError () returned 0x5
	[0064.958] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.958] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.958] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.959] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.959] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16651cf9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16677f4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1108, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3eb0
	[0064.960] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.960] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa879350, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x765018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f312a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86f312a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a04f26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a04f26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.961] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.961] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.962] SetLastError (dwErrCode=0x0) 
	[0064.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.964] GetLastError () returned 0x5
	[0064.964] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.964] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.964] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="da", cAlternateFileName="")) returned 1
	[0064.964] SetLastError (dwErrCode=0x0) 
	[0064.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.964] GetLastError () returned 0x5
	[0064.964] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.964] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.964] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0064.965] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.966] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1096, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.966] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3eb4
	[0064.967] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf07af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12910b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.967] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.968] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0064.968] SetLastError (dwErrCode=0x0) 
	[0064.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.970] GetLastError () returned 0x5
	[0064.970] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.970] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.970] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="de", cAlternateFileName="")) returned 1
	[0064.970] SetLastError (dwErrCode=0x0) 
	[0064.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.970] GetLastError () returned 0x5
	[0064.970] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.970] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.971] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0064.971] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.971] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3eb8
	[0064.972] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86cced8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86cced8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf64139b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf64139b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e95d39, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.973] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0064.974] SetLastError (dwErrCode=0x0) 
	[0064.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.975] GetLastError () returned 0x5
	[0064.975] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.975] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.975] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="el", cAlternateFileName="")) returned 1
	[0064.975] SetLastError (dwErrCode=0x0) 
	[0064.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.976] GetLastError () returned 0x5
	[0064.976] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.976] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.976] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.977] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x169d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ebc
	[0064.977] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf073ddf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf073ddf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x211030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff580e7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4baa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1aaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf126aeb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf126aeb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.978] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.978] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.979] SetLastError (dwErrCode=0x0) 
	[0064.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.981] GetLastError () returned 0x5
	[0064.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.981] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.981] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en", cAlternateFileName="")) returned 1
	[0064.981] SetLastError (dwErrCode=0x0) 
	[0064.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.981] GetLastError () returned 0x5
	[0064.981] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.981] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.981] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0064.982] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.982] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec0
	[0064.982] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.983] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 0
	[0064.983] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0064.983] SetLastError (dwErrCode=0x0) 
	[0064.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.983] GetLastError () returned 0x5
	[0064.983] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.983] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.983] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es", cAlternateFileName="")) returned 1
	[0064.983] SetLastError (dwErrCode=0x0) 
	[0064.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.983] GetLastError () returned 0x5
	[0064.983] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.983] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.983] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0064.985] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.985] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec4
	[0064.986] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.986] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7ca9e76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7ca9e76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.987] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.987] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0064.988] SetLastError (dwErrCode=0x0) 
	[0064.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.989] GetLastError () returned 0x5
	[0064.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.989] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.989] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="et", cAlternateFileName="")) returned 1
	[0064.989] SetLastError (dwErrCode=0x0) 
	[0064.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.989] GetLastError () returned 0x5
	[0064.990] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.990] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.990] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0064.990] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.990] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1072, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec8
	[0064.991] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.991] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.991] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.991] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0064.991] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c20913, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5ae112, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf755cb7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.992] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.992] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0064.993] SetLastError (dwErrCode=0x0) 
	[0064.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.995] GetLastError () returned 0x5
	[0064.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.995] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.995] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eu", cAlternateFileName="")) returned 1
	[0064.995] SetLastError (dwErrCode=0x0) 
	[0064.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.995] GetLastError () returned 0x5
	[0064.995] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0064.995] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0064.995] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0064.996] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.996] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0064.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ecc
	[0064.997] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2cf9c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2cf9c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2834f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2834f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19de457, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19de457, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19de457, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0064.997] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0064.997] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0064.998] SetLastError (dwErrCode=0x0) 
	[0064.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.000] GetLastError () returned 0x5
	[0065.000] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.000] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.000] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fi", cAlternateFileName="")) returned 1
	[0065.000] SetLastError (dwErrCode=0x0) 
	[0065.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.000] GetLastError () returned 0x5
	[0065.000] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.000] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.000] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.001] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.001] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ed0
	[0065.002] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19af8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44a2874, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e30870, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e30870, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c62325, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c62325, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c62325, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.002] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.003] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.003] SetLastError (dwErrCode=0x0) 
	[0065.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.005] GetLastError () returned 0x5
	[0065.005] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.005] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.005] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr", cAlternateFileName="")) returned 1
	[0065.005] SetLastError (dwErrCode=0x0) 
	[0065.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.005] GetLastError () returned 0x5
	[0065.005] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.005] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.005] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.006] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.006] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ed4
	[0065.007] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f92917, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f92917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3fb8b54, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cdf4b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cdf4b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cdf4b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x202030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8502274, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8502274, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b3aadd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b3aadd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37d2e47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37d2e47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91f9f99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91f9f99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.007] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.008] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.008] SetLastError (dwErrCode=0x0) 
	[0065.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.010] GetLastError () returned 0x5
	[0065.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.010] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.010] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="gl", cAlternateFileName="")) returned 1
	[0065.010] SetLastError (dwErrCode=0x0) 
	[0065.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.010] GetLastError () returned 0x5
	[0065.010] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.010] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.010] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.011] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.011] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ed8
	[0065.012] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbce360e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbce360e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3aa7b04, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.012] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.013] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.013] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.013] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.013] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23428c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.013] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.013] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.013] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.013] SetLastError (dwErrCode=0x0) 
	[0065.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.015] GetLastError () returned 0x5
	[0065.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.015] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.015] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="he", cAlternateFileName="")) returned 1
	[0065.015] SetLastError (dwErrCode=0x0) 
	[0065.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.015] GetLastError () returned 0x5
	[0065.015] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.015] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.016] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.016] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3edc
	[0065.017] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20aa98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c62325, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c62325, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c62325, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3a5b63a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7d2609, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.017] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.018] SetLastError (dwErrCode=0x0) 
	[0065.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.020] GetLastError () returned 0x5
	[0065.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.020] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.020] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hi", cAlternateFileName="")) returned 1
	[0065.020] SetLastError (dwErrCode=0x0) 
	[0065.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.020] GetLastError () returned 0x5
	[0065.020] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.020] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.020] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.021] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.021] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1785, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ee0
	[0065.024] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x216030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf447c679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x77068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f92917, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.025] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.026] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.026] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.026] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.026] SetLastError (dwErrCode=0x0) 
	[0065.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.028] GetLastError () returned 0x5
	[0065.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.029] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.029] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hr", cAlternateFileName="")) returned 1
	[0065.029] SetLastError (dwErrCode=0x0) 
	[0065.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.029] GetLastError () returned 0x5
	[0065.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.029] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0065.030] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.030] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16736b69, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ee4
	[0065.031] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0f23aa6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd55d11, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd55d11, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5d437d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5d437d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.031] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.032] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2f2d53e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2f2d53e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.032] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.032] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.032] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.032] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.032] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.032] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0065.032] SetLastError (dwErrCode=0x0) 
	[0065.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.034] GetLastError () returned 0x5
	[0065.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.034] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hu", cAlternateFileName="")) returned 1
	[0065.034] SetLastError (dwErrCode=0x0) 
	[0065.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.034] GetLastError () returned 0x5
	[0065.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.035] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.035] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ee8
	[0065.036] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.036] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.036] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.036] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.036] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x85e80ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x85e80ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e80ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.037] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.038] SetLastError (dwErrCode=0x0) 
	[0065.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.040] GetLastError () returned 0x5
	[0065.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.040] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.040] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="id", cAlternateFileName="")) returned 1
	[0065.040] SetLastError (dwErrCode=0x0) 
	[0065.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.040] GetLastError () returned 0x5
	[0065.040] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.040] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.041] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.041] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3eec
	[0065.042] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa531f86, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa531f86, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x46a153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb16b0a3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb16b0a3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6ac83cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.043] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.043] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.043] SetLastError (dwErrCode=0x0) 
	[0065.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.045] GetLastError () returned 0x5
	[0065.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.045] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1
	[0065.045] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="it", cAlternateFileName="")) returned 1
	[0065.045] SetLastError (dwErrCode=0x0) 
	[0065.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.045] GetLastError () returned 0x5
	[0065.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.046] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.046] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ef0
	[0065.047] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.047] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.047] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x390a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x520cca6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd8f528, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd8f528, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47b08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.048] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.049] SetLastError (dwErrCode=0x0) 
	[0065.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.050] GetLastError () returned 0x5
	[0065.050] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.050] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.050] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja", cAlternateFileName="")) returned 1
	[0065.050] SetLastError (dwErrCode=0x0) 
	[0065.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.051] GetLastError () returned 0x5
	[0065.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.051] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0065.051] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.052] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ef4
	[0065.052] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.052] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.052] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x204030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99dec29, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99dec29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf37f804b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6081126, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6081126, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.053] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6081126, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6081126, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.053] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0065.054] SetLastError (dwErrCode=0x0) 
	[0065.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.055] GetLastError () returned 0x5
	[0065.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.055] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.055] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kk", cAlternateFileName="")) returned 1
	[0065.055] SetLastError (dwErrCode=0x0) 
	[0065.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.055] GetLastError () returned 0x5
	[0065.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.055] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.056] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.057] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.057] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ef8
	[0065.058] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c15e5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b3aadd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b3aadd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a18be3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x74040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a3ee57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6735b3a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.059] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.059] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.059] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.059] SetLastError (dwErrCode=0x0) 
	[0065.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.061] GetLastError () returned 0x5
	[0065.061] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.061] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.061] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ko", cAlternateFileName="")) returned 1
	[0065.061] SetLastError (dwErrCode=0x0) 
	[0065.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.061] GetLastError () returned 0x5
	[0065.061] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.061] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.061] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.062] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.062] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3efc
	[0065.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7ca9e76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7ca9e76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f0835f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.063] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.063] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.064] SetLastError (dwErrCode=0x0) 
	[0065.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.066] GetLastError () returned 0x5
	[0065.066] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.066] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.066] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lt", cAlternateFileName="")) returned 1
	[0065.066] SetLastError (dwErrCode=0x0) 
	[0065.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.066] GetLastError () returned 0x5
	[0065.066] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.066] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.066] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0065.067] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.067] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1111, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f00
	[0065.067] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a18be3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a18be3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a3ee57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5480, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.068] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.068] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0065.069] SetLastError (dwErrCode=0x0) 
	[0065.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.070] GetLastError () returned 0x5
	[0065.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.070] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.071] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lv", cAlternateFileName="")) returned 1
	[0065.071] SetLastError (dwErrCode=0x0) 
	[0065.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.071] GetLastError () returned 0x5
	[0065.071] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.071] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0065.141] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.141] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1191, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f04
	[0065.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a6473, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12910b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.142] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43250ed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.143] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.143] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0065.144] SetLastError (dwErrCode=0x0) 
	[0065.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.146] GetLastError () returned 0x5
	[0065.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.146] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.AdomdClientUI.dll", cAlternateFileName="MIF69D~1.DLL")) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17bc90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.dll", cAlternateFileName="MI6388~1.DLL")) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1af090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll", cAlternateFileName="MI37F3~1.DLL")) returned 1
	[0065.146] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x664698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.147] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll", cAlternateFileName="MI3E9C~1.DLL")) returned 1
	[0065.147] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.dll", cAlternateFileName="MIA386~1.DLL")) returned 1
	[0065.147] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Modeler.UI.rll", cAlternateFileName="MICROS~1.RLL")) returned 1
	[0065.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e1c
	[0065.148] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MI4938~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c630, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.dll", cAlternateFileName="MI0653~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Dallas.OAuthClient.dll", cAlternateFileName="MIF98A~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae48f06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.Recommendation.Client.Core.dll", cAlternateFileName="MIC655~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeca8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.dll", cAlternateFileName="MI021B~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll", cAlternateFileName="MI7F2A~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.Recommendation.Common.dll", cAlternateFileName="MI37D9~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.DLL", cAlternateFileName="MIA28E~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c88562, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c88562, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18e058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.dll", cAlternateFileName="MI2EE4~1.DLL")) returned 1
	[0065.148] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1
	[0065.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f08
	[0065.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.dll", cAlternateFileName="MI8157~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1726c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.dll", cAlternateFileName="MIBCC9~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x886d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.dll", cAlternateFileName="MIB40B~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19b820e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.dll", cAlternateFileName="MIC718~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36468, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15868, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.dll", cAlternateFileName="MIBACB~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.dll", cAlternateFileName="MI319B~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4561444, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4561444, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85f4c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.reportviewer.common.dll", cAlternateFileName="MI70D9~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x872c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.reportviewer.winforms.dll", cAlternateFileName="MI925C~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e2c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.dll", cAlternateFileName="MI4FF6~1.DLL")) returned 1
	[0065.215] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ms", cAlternateFileName="")) returned 1
	[0065.215] SetLastError (dwErrCode=0x0) 
	[0065.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.215] GetLastError () returned 0x5
	[0065.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.215] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0065.216] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.216] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f10
	[0065.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x618c1b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x618c1b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x618c1b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf37f804b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf37f804b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c6bda4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaebb622, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaebb622, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.219] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.219] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0065.220] SetLastError (dwErrCode=0x0) 
	[0065.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.222] GetLastError () returned 0x5
	[0065.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.222] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.222] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nl", cAlternateFileName="")) returned 1
	[0065.222] SetLastError (dwErrCode=0x0) 
	[0065.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.222] GetLastError () returned 0x5
	[0065.222] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.222] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.223] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.223] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167f56e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f14
	[0065.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0da6398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0da6398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67f4711, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67f4711, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6840bbc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.225] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.225] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.226] SetLastError (dwErrCode=0x0) 
	[0065.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.228] GetLastError () returned 0x5
	[0065.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.228] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.228] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="no", cAlternateFileName="")) returned 1
	[0065.228] SetLastError (dwErrCode=0x0) 
	[0065.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.229] GetLastError () returned 0x5
	[0065.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.229] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.230] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.230] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f18
	[0065.230] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ee8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6735b3a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6735b3a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6735b3a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.231] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.232] SetLastError (dwErrCode=0x0) 
	[0065.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.233] GetLastError () returned 0x5
	[0065.233] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.233] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.233] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1
	[0065.233] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pl", cAlternateFileName="")) returned 1
	[0065.233] SetLastError (dwErrCode=0x0) 
	[0065.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.234] GetLastError () returned 0x5
	[0065.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.234] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f1c
	[0065.235] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fed144, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fed144, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7ac3b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.237] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.237] SetLastError (dwErrCode=0x0) 
	[0065.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.240] GetLastError () returned 0x5
	[0065.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.240] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.240] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1
	[0065.240] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.tlb", cAlternateFileName="POWERP~1.TLB")) returned 1
	[0065.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f0c
	[0065.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.241] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt", cAlternateFileName="")) returned 1
	[0065.241] SetLastError (dwErrCode=0x0) 
	[0065.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.241] GetLastError () returned 0x5
	[0065.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.241] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0065.242] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.243] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f24
	[0065.244] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2984c3b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2984c3b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f7aa31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.244] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.245] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.245] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0065.245] SetLastError (dwErrCode=0x0) 
	[0065.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.248] GetLastError () returned 0x5
	[0065.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.248] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.248] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0065.248] SetLastError (dwErrCode=0x0) 
	[0065.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.248] GetLastError () returned 0x5
	[0065.248] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.248] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0065.249] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.249] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.249] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f28
	[0065.250] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.250] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.250] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.250] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2268a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d71cd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d71cd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.251] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d71cd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d71cd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.251] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0065.252] SetLastError (dwErrCode=0x0) 
	[0065.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.254] GetLastError () returned 0x5
	[0065.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.254] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.254] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.254] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0065.254] SetLastError (dwErrCode=0x0) 
	[0065.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.254] GetLastError () returned 0x5
	[0065.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.254] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.255] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.255] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1025", cAlternateFileName="")) returned 1
	[0065.255] SetLastError (dwErrCode=0x0) 
	[0065.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.256] GetLastError () returned 0x5
	[0065.256] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.256] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.256] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.256] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.256] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f30
	[0065.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.257] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.257] SetLastError (dwErrCode=0x0) 
	[0065.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.258] GetLastError () returned 0x5
	[0065.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.258] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.258] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1026", cAlternateFileName="")) returned 1
	[0065.258] SetLastError (dwErrCode=0x0) 
	[0065.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.258] GetLastError () returned 0x5
	[0065.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.258] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.258] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.258] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.258] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f34
	[0065.260] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.260] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.260] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.260] SetLastError (dwErrCode=0x0) 
	[0065.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.261] GetLastError () returned 0x5
	[0065.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.261] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.261] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="10266", cAlternateFileName="")) returned 1
	[0065.261] SetLastError (dwErrCode=0x0) 
	[0065.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.261] GetLastError () returned 0x5
	[0065.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.261] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.262] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.262] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.262] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f38
	[0065.263] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.263] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.263] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.263] SetLastError (dwErrCode=0x0) 
	[0065.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.263] GetLastError () returned 0x5
	[0065.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.263] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.263] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1027", cAlternateFileName="")) returned 1
	[0065.263] SetLastError (dwErrCode=0x0) 
	[0065.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.264] GetLastError () returned 0x5
	[0065.264] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.264] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.264] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.264] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f3c
	[0065.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.265] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.265] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.265] SetLastError (dwErrCode=0x0) 
	[0065.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.265] GetLastError () returned 0x5
	[0065.265] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.266] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.266] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1028", cAlternateFileName="")) returned 1
	[0065.266] SetLastError (dwErrCode=0x0) 
	[0065.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.266] GetLastError () returned 0x5
	[0065.266] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.266] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.266] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.266] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x106c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f40
	[0065.267] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.267] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x106c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.267] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.267] SetLastError (dwErrCode=0x0) 
	[0065.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.268] GetLastError () returned 0x5
	[0065.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.268] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.268] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1029", cAlternateFileName="")) returned 1
	[0065.268] SetLastError (dwErrCode=0x0) 
	[0065.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.268] GetLastError () returned 0x5
	[0065.268] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.268] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.268] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.268] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f44
	[0065.269] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.269] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.270] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.270] SetLastError (dwErrCode=0x0) 
	[0065.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.270] GetLastError () returned 0x5
	[0065.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.270] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.270] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1030", cAlternateFileName="")) returned 1
	[0065.270] SetLastError (dwErrCode=0x0) 
	[0065.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.270] GetLastError () returned 0x5
	[0065.270] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.270] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.270] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0065.270] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.271] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f48
	[0065.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.272] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.272] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0065.272] SetLastError (dwErrCode=0x0) 
	[0065.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.272] GetLastError () returned 0x5
	[0065.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.272] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.272] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1031", cAlternateFileName="")) returned 1
	[0065.272] SetLastError (dwErrCode=0x0) 
	[0065.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.272] GetLastError () returned 0x5
	[0065.272] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.272] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.272] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.273] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.273] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.273] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f4c
	[0065.274] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.274] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.274] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.274] SetLastError (dwErrCode=0x0) 
	[0065.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.274] GetLastError () returned 0x5
	[0065.274] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.274] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.495] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1032", cAlternateFileName="")) returned 1
	[0065.495] SetLastError (dwErrCode=0x0) 
	[0065.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.495] GetLastError () returned 0x5
	[0065.495] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.495] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.496] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.496] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f50
	[0065.497] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.498] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.498] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.498] SetLastError (dwErrCode=0x0) 
	[0065.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.498] GetLastError () returned 0x5
	[0065.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.498] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.498] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0065.498] SetLastError (dwErrCode=0x0) 
	[0065.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.498] GetLastError () returned 0x5
	[0065.498] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.498] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.499] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.499] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f54
	[0065.499] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.500] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.500] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.500] SetLastError (dwErrCode=0x0) 
	[0065.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.500] GetLastError () returned 0x5
	[0065.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.500] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.500] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1035", cAlternateFileName="")) returned 1
	[0065.500] SetLastError (dwErrCode=0x0) 
	[0065.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.500] GetLastError () returned 0x5
	[0065.500] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.500] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.502] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.502] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f58
	[0065.503] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.503] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.503] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.503] SetLastError (dwErrCode=0x0) 
	[0065.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.503] GetLastError () returned 0x5
	[0065.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.503] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.503] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1036", cAlternateFileName="")) returned 1
	[0065.503] SetLastError (dwErrCode=0x0) 
	[0065.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.503] GetLastError () returned 0x5
	[0065.503] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.503] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.504] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.504] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.504] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f5c
	[0065.504] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.504] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.505] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.505] SetLastError (dwErrCode=0x0) 
	[0065.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.505] GetLastError () returned 0x5
	[0065.505] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.505] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.505] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1037", cAlternateFileName="")) returned 1
	[0065.505] SetLastError (dwErrCode=0x0) 
	[0065.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.505] GetLastError () returned 0x5
	[0065.505] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.505] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.505] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.505] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.505] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.506] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f60
	[0065.506] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.506] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.506] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.507] SetLastError (dwErrCode=0x0) 
	[0065.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.507] GetLastError () returned 0x5
	[0065.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.507] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.507] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1038", cAlternateFileName="")) returned 1
	[0065.507] SetLastError (dwErrCode=0x0) 
	[0065.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.507] GetLastError () returned 0x5
	[0065.507] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.507] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.508] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.508] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.508] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.508] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f64
	[0065.509] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.509] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.509] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.509] SetLastError (dwErrCode=0x0) 
	[0065.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.509] GetLastError () returned 0x5
	[0065.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.510] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.510] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1040", cAlternateFileName="")) returned 1
	[0065.510] SetLastError (dwErrCode=0x0) 
	[0065.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.510] GetLastError () returned 0x5
	[0065.510] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.510] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0065.511] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.511] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.511] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.511] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f68
	[0065.512] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.512] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.512] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0065.512] SetLastError (dwErrCode=0x0) 
	[0065.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.512] GetLastError () returned 0x5
	[0065.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.512] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.512] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1041", cAlternateFileName="")) returned 1
	[0065.512] SetLastError (dwErrCode=0x0) 
	[0065.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.512] GetLastError () returned 0x5
	[0065.512] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.512] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.513] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.513] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.513] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f6c
	[0065.513] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.514] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.514] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.514] SetLastError (dwErrCode=0x0) 
	[0065.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.514] GetLastError () returned 0x5
	[0065.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.514] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.514] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1042", cAlternateFileName="")) returned 1
	[0065.514] SetLastError (dwErrCode=0x0) 
	[0065.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.514] GetLastError () returned 0x5
	[0065.514] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.514] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.515] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.515] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f70
	[0065.515] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.516] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.516] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.516] SetLastError (dwErrCode=0x0) 
	[0065.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.516] GetLastError () returned 0x5
	[0065.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.516] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.516] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1043", cAlternateFileName="")) returned 1
	[0065.516] SetLastError (dwErrCode=0x0) 
	[0065.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.516] GetLastError () returned 0x5
	[0065.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.516] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.517] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.517] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f74
	[0065.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.518] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.518] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.519] SetLastError (dwErrCode=0x0) 
	[0065.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.519] GetLastError () returned 0x5
	[0065.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.519] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.519] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1044", cAlternateFileName="")) returned 1
	[0065.519] SetLastError (dwErrCode=0x0) 
	[0065.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.519] GetLastError () returned 0x5
	[0065.519] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.519] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0065.519] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.519] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f78
	[0065.520] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.520] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.520] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0065.521] SetLastError (dwErrCode=0x0) 
	[0065.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.521] GetLastError () returned 0x5
	[0065.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.521] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.521] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1045", cAlternateFileName="")) returned 1
	[0065.521] SetLastError (dwErrCode=0x0) 
	[0065.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.521] GetLastError () returned 0x5
	[0065.521] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.521] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.521] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.521] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.521] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f7c
	[0065.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.522] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.522] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.522] SetLastError (dwErrCode=0x0) 
	[0065.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.523] GetLastError () returned 0x5
	[0065.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.523] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.523] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1046", cAlternateFileName="")) returned 1
	[0065.523] SetLastError (dwErrCode=0x0) 
	[0065.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.523] GetLastError () returned 0x5
	[0065.523] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.523] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.523] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.523] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f80
	[0065.524] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.524] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.524] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.524] SetLastError (dwErrCode=0x0) 
	[0065.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.524] GetLastError () returned 0x5
	[0065.524] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.524] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.524] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1048", cAlternateFileName="")) returned 1
	[0065.524] SetLastError (dwErrCode=0x0) 
	[0065.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.525] GetLastError () returned 0x5
	[0065.525] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.525] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.525] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.525] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f84
	[0065.526] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.526] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.526] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.527] SetLastError (dwErrCode=0x0) 
	[0065.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.527] GetLastError () returned 0x5
	[0065.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.527] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.527] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1049", cAlternateFileName="")) returned 1
	[0065.527] SetLastError (dwErrCode=0x0) 
	[0065.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.527] GetLastError () returned 0x5
	[0065.527] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.527] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.527] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.527] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.527] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f88
	[0065.528] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.529] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.529] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.529] SetLastError (dwErrCode=0x0) 
	[0065.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.529] GetLastError () returned 0x5
	[0065.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.529] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.529] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1050", cAlternateFileName="")) returned 1
	[0065.529] SetLastError (dwErrCode=0x0) 
	[0065.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.529] GetLastError () returned 0x5
	[0065.529] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.529] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0065.529] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.530] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f8c
	[0065.530] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.530] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.531] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0065.531] SetLastError (dwErrCode=0x0) 
	[0065.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.531] GetLastError () returned 0x5
	[0065.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.531] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.531] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1051", cAlternateFileName="")) returned 1
	[0065.531] SetLastError (dwErrCode=0x0) 
	[0065.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.531] GetLastError () returned 0x5
	[0065.531] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.531] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.531] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.531] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f90
	[0065.532] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.532] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.532] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.532] SetLastError (dwErrCode=0x0) 
	[0065.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.532] GetLastError () returned 0x5
	[0065.532] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.532] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.532] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1053", cAlternateFileName="")) returned 1
	[0065.532] SetLastError (dwErrCode=0x0) 
	[0065.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.533] GetLastError () returned 0x5
	[0065.533] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.533] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0065.533] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.533] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f94
	[0065.533] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.534] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.534] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0065.534] SetLastError (dwErrCode=0x0) 
	[0065.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.534] GetLastError () returned 0x5
	[0065.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.534] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.534] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1054", cAlternateFileName="")) returned 1
	[0065.534] SetLastError (dwErrCode=0x0) 
	[0065.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.534] GetLastError () returned 0x5
	[0065.534] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.534] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0065.562] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.563] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f98
	[0065.564] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.564] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.564] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0065.564] SetLastError (dwErrCode=0x0) 
	[0065.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.564] GetLastError () returned 0x5
	[0065.564] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.564] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.564] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1055", cAlternateFileName="")) returned 1
	[0065.564] SetLastError (dwErrCode=0x0) 
	[0065.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.565] GetLastError () returned 0x5
	[0065.565] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.565] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.565] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.565] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f9c
	[0065.566] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.566] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.566] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.566] SetLastError (dwErrCode=0x0) 
	[0065.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.567] GetLastError () returned 0x5
	[0065.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.567] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.567] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1057", cAlternateFileName="")) returned 1
	[0065.567] SetLastError (dwErrCode=0x0) 
	[0065.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.567] GetLastError () returned 0x5
	[0065.567] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.567] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.567] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.567] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.567] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fa0
	[0065.568] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.569] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.569] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.569] SetLastError (dwErrCode=0x0) 
	[0065.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.569] GetLastError () returned 0x5
	[0065.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.569] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.569] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1058", cAlternateFileName="")) returned 1
	[0065.569] SetLastError (dwErrCode=0x0) 
	[0065.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.569] GetLastError () returned 0x5
	[0065.569] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.569] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.569] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.570] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.570] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fa4
	[0065.571] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.572] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.572] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.572] SetLastError (dwErrCode=0x0) 
	[0065.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.572] GetLastError () returned 0x5
	[0065.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.572] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.572] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1060", cAlternateFileName="")) returned 1
	[0065.572] SetLastError (dwErrCode=0x0) 
	[0065.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.572] GetLastError () returned 0x5
	[0065.572] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.572] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.573] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.573] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.573] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.573] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fa8
	[0065.574] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.574] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.574] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.574] SetLastError (dwErrCode=0x0) 
	[0065.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.575] GetLastError () returned 0x5
	[0065.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.575] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.575] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1061", cAlternateFileName="")) returned 1
	[0065.575] SetLastError (dwErrCode=0x0) 
	[0065.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.575] GetLastError () returned 0x5
	[0065.575] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.575] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0065.575] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.575] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.575] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fac
	[0065.576] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.576] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.576] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0065.576] SetLastError (dwErrCode=0x0) 
	[0065.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.576] GetLastError () returned 0x5
	[0065.576] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.576] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.576] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1062", cAlternateFileName="")) returned 1
	[0065.576] SetLastError (dwErrCode=0x0) 
	[0065.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.576] GetLastError () returned 0x5
	[0065.577] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.577] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.577] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.577] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fb0
	[0065.577] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.578] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.578] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.578] SetLastError (dwErrCode=0x0) 
	[0065.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.578] GetLastError () returned 0x5
	[0065.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.578] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.578] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1063", cAlternateFileName="")) returned 1
	[0065.578] SetLastError (dwErrCode=0x0) 
	[0065.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.578] GetLastError () returned 0x5
	[0065.578] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.578] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.578] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.579] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fb4
	[0065.580] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.580] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.580] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.581] SetLastError (dwErrCode=0x0) 
	[0065.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.581] GetLastError () returned 0x5
	[0065.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.581] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.581] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1066", cAlternateFileName="")) returned 1
	[0065.581] SetLastError (dwErrCode=0x0) 
	[0065.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.581] GetLastError () returned 0x5
	[0065.581] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.581] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.581] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.582] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.582] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fb8
	[0065.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.584] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.584] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.584] SetLastError (dwErrCode=0x0) 
	[0065.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.584] GetLastError () returned 0x5
	[0065.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.584] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.584] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1069", cAlternateFileName="")) returned 1
	[0065.584] SetLastError (dwErrCode=0x0) 
	[0065.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.584] GetLastError () returned 0x5
	[0065.584] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.584] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.585] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.585] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fbc
	[0065.586] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.586] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.586] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.586] SetLastError (dwErrCode=0x0) 
	[0065.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.586] GetLastError () returned 0x5
	[0065.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.586] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.586] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1081", cAlternateFileName="")) returned 1
	[0065.586] SetLastError (dwErrCode=0x0) 
	[0065.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.586] GetLastError () returned 0x5
	[0065.586] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.586] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.587] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.587] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fc0
	[0065.588] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.588] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.588] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.588] SetLastError (dwErrCode=0x0) 
	[0065.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.588] GetLastError () returned 0x5
	[0065.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.588] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.588] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1086", cAlternateFileName="")) returned 1
	[0065.588] SetLastError (dwErrCode=0x0) 
	[0065.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.588] GetLastError () returned 0x5
	[0065.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.588] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.588] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.589] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.589] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7abb0bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fc4
	[0065.589] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.590] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7abb0bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.590] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.590] SetLastError (dwErrCode=0x0) 
	[0065.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.590] GetLastError () returned 0x5
	[0065.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.590] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.590] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1087", cAlternateFileName="")) returned 1
	[0065.590] SetLastError (dwErrCode=0x0) 
	[0065.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.590] GetLastError () returned 0x5
	[0065.590] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.590] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.590] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.591] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.591] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fc8
	[0065.592] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.592] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.592] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.592] SetLastError (dwErrCode=0x0) 
	[0065.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.592] GetLastError () returned 0x5
	[0065.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.593] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.593] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1110", cAlternateFileName="")) returned 1
	[0065.593] SetLastError (dwErrCode=0x0) 
	[0065.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.593] GetLastError () returned 0x5
	[0065.593] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.593] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.593] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0065.593] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.593] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fcc
	[0065.594] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.594] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.594] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0065.594] SetLastError (dwErrCode=0x0) 
	[0065.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.594] GetLastError () returned 0x5
	[0065.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.594] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.594] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2052", cAlternateFileName="")) returned 1
	[0065.594] SetLastError (dwErrCode=0x0) 
	[0065.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.594] GetLastError () returned 0x5
	[0065.594] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.595] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.595] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.595] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fd0
	[0065.595] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.596] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.596] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.596] SetLastError (dwErrCode=0x0) 
	[0065.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.596] GetLastError () returned 0x5
	[0065.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.596] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.596] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2070", cAlternateFileName="")) returned 1
	[0065.596] SetLastError (dwErrCode=0x0) 
	[0065.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.596] GetLastError () returned 0x5
	[0065.596] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.596] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.596] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.597] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.597] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fd4
	[0065.597] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.597] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.598] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.598] SetLastError (dwErrCode=0x0) 
	[0065.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.598] GetLastError () returned 0x5
	[0065.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.598] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.598] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2074", cAlternateFileName="")) returned 1
	[0065.598] SetLastError (dwErrCode=0x0) 
	[0065.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.598] GetLastError () returned 0x5
	[0065.598] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.598] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.654] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.654] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fd8
	[0065.655] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.656] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.656] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.656] SetLastError (dwErrCode=0x0) 
	[0065.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2074\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.656] GetLastError () returned 0x5
	[0065.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.656] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.656] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3082", cAlternateFileName="")) returned 1
	[0065.656] SetLastError (dwErrCode=0x0) 
	[0065.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.656] GetLastError () returned 0x5
	[0065.656] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.656] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.657] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.657] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.657] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fdc
	[0065.658] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.658] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.658] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.658] SetLastError (dwErrCode=0x0) 
	[0065.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.658] GetLastError () returned 0x5
	[0065.658] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.658] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.658] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="9242", cAlternateFileName="")) returned 1
	[0065.658] SetLastError (dwErrCode=0x0) 
	[0065.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.659] GetLastError () returned 0x5
	[0065.659] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.659] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.659] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.659] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.659] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 1
	[0065.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fe0
	[0065.660] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.660] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPivotExcelClientAddIn.rll", cAlternateFileName="POWERP~1.RLL")) returned 0
	[0065.660] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.660] SetLastError (dwErrCode=0x0) 
	[0065.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.660] GetLastError () returned 0x5
	[0065.660] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0065.660] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.661] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="9242", cAlternateFileName="")) returned 0
	[0065.661] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.661] SetLastError (dwErrCode=0x0) 
	[0065.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.661] GetLastError () returned 0x5
	[0065.661] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.661] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.661] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ro", cAlternateFileName="")) returned 1
	[0065.661] SetLastError (dwErrCode=0x0) 
	[0065.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.661] GetLastError () returned 0x5
	[0065.661] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.661] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.661] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.662] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.662] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x110b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.662] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f2c
	[0065.663] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.663] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.663] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad2662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad2662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf971d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.663] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ffa98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c1f8d1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.664] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.664] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.665] SetLastError (dwErrCode=0x0) 
	[0065.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.667] GetLastError () returned 0x5
	[0065.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.667] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.667] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ru", cAlternateFileName="")) returned 1
	[0065.667] SetLastError (dwErrCode=0x0) 
	[0065.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.667] GetLastError () returned 0x5
	[0065.667] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.667] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.667] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.668] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.668] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.668] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fe4
	[0065.669] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8ae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x384552e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x384552e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x613fd44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.669] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f2e583, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f2e583, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.670] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.670] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.670] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.670] SetLastError (dwErrCode=0x0) 
	[0065.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.672] GetLastError () returned 0x5
	[0065.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.672] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.672] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sk", cAlternateFileName="")) returned 1
	[0065.672] SetLastError (dwErrCode=0x0) 
	[0065.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.672] GetLastError () returned 0x5
	[0065.672] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.672] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.672] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.673] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.673] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.673] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fe8
	[0065.674] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x78b299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x78b299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12910b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a04f26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a04f26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff580e7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.674] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.675] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c66c57, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.675] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.675] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.675] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.675] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.675] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.675] SetLastError (dwErrCode=0x0) 
	[0065.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.677] GetLastError () returned 0x5
	[0065.677] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.677] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.677] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sl", cAlternateFileName="")) returned 1
	[0065.677] SetLastError (dwErrCode=0x0) 
	[0065.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.678] GetLastError () returned 0x5
	[0065.678] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.678] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0065.678] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.679] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fec
	[0065.679] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.679] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.679] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.679] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fe030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1697068, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a0a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4110038, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4110038, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x447d6b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf126aeb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf126aeb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe99511, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.680] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.680] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0065.681] SetLastError (dwErrCode=0x0) 
	[0065.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.682] GetLastError () returned 0x5
	[0065.682] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.682] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.682] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0065.682] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1
	[0065.682] SetLastError (dwErrCode=0x0) 
	[0065.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.683] GetLastError () returned 0x5
	[0065.683] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.683] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.683] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.684] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ff0
	[0065.684] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.684] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.684] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.684] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x694bc43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20b030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x520cca6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.685] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.685] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.686] SetLastError (dwErrCode=0x0) 
	[0065.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.687] GetLastError () returned 0x5
	[0065.687] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.687] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.687] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0065.687] SetLastError (dwErrCode=0x0) 
	[0065.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.688] GetLastError () returned 0x5
	[0065.688] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.688] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.688] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.688] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ff4
	[0065.689] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16e4606, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x694bc43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x694bc43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.689] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb91216, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb91216, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf971d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.690] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.690] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.690] SetLastError (dwErrCode=0x0) 
	[0065.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.692] GetLastError () returned 0x5
	[0065.692] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.692] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.692] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0065.692] SetLastError (dwErrCode=0x0) 
	[0065.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.692] GetLastError () returned 0x5
	[0065.692] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.692] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.693] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.693] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ff8
	[0065.694] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67f4711, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67f4711, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67f4711, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e91324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.694] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a6473, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.695] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.695] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.695] SetLastError (dwErrCode=0x0) 
	[0065.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.697] GetLastError () returned 0x5
	[0065.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.697] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.697] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sv", cAlternateFileName="")) returned 1
	[0065.697] SetLastError (dwErrCode=0x0) 
	[0065.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.697] GetLastError () returned 0x5
	[0065.697] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.697] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.698] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0065.698] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.698] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ffc
	[0065.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf145ad52, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf145ad52, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.699] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43250ed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf02eb98a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf02eb98a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6ac83cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.700] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.700] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0065.701] SetLastError (dwErrCode=0x0) 
	[0065.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.702] GetLastError () returned 0x5
	[0065.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.702] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.702] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="th", cAlternateFileName="")) returned 1
	[0065.702] SetLastError (dwErrCode=0x0) 
	[0065.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.702] GetLastError () returned 0x5
	[0065.702] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.702] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.704] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.704] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1681b941, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4004
	[0065.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3b191de, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3b191de, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x216030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1daa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.705] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.705] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.706] SetLastError (dwErrCode=0x0) 
	[0065.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.708] GetLastError () returned 0x5
	[0065.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.708] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.708] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tr", cAlternateFileName="")) returned 1
	[0065.708] SetLastError (dwErrCode=0x0) 
	[0065.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.708] GetLastError () returned 0x5
	[0065.708] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.708] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.709] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.709] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16867e02, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10b1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4008
	[0065.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x681a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x681a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6840bbc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c20913, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4abe91a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4abe91a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4b3103f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13058, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.710] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17ef5ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.711] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.711] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.711] SetLastError (dwErrCode=0x0) 
	[0065.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.713] GetLastError () returned 0x5
	[0065.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.713] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.713] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1
	[0065.713] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="uk", cAlternateFileName="")) returned 1
	[0065.713] SetLastError (dwErrCode=0x0) 
	[0065.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.713] GetLastError () returned 0x5
	[0065.713] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.713] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.714] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.714] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1655, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x400c
	[0065.716] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb16b0a3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb16b0a3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15a90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a6407d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a6407d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20ba98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6b9190, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6b9190, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc6b9190, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4440, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.716] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.717] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.717] SetLastError (dwErrCode=0x0) 
	[0065.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.719] GetLastError () returned 0x5
	[0065.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.719] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.719] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vi", cAlternateFileName="")) returned 1
	[0065.719] SetLastError (dwErrCode=0x0) 
	[0065.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.719] GetLastError () returned 0x5
	[0065.719] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.719] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.719] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.720] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.720] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12af, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.720] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4010
	[0065.721] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf164abda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1697068, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a818c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a818c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3ed3d47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x203a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e95d39, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e95d39, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf26d5141, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf26d5141, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ee107e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc692f34, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.721] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.722] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.722] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.722] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.722] SetLastError (dwErrCode=0x0) 
	[0065.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.724] GetLastError () returned 0x5
	[0065.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.725] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.725] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0065.725] SetLastError (dwErrCode=0x0) 
	[0065.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.725] GetLastError () returned 0x5
	[0065.725] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.725] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0065.726] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.726] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.726] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4014
	[0065.727] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37d2e47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37d2e47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3fb8b54, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3fb8b54, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x402b37e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd8f528, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd8f528, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86cced8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86cced8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1
	[0065.727] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.728] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.728] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.728] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6de953e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6de953e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.728] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6de953e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6de953e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.728] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0065.728] SetLastError (dwErrCode=0x0) 
	[0065.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.730] GetLastError () returned 0x5
	[0065.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.730] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.730] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0065.730] SetLastError (dwErrCode=0x0) 
	[0065.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.730] GetLastError () returned 0x5
	[0065.730] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.730] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0065.731] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.731] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4018
	[0065.747] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x384552e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x384552e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x384552e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x36c7dee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x36c7dee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0065.747] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5df79a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19040, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0065.748] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0
	[0065.748] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0065.749] SetLastError (dwErrCode=0x0) 
	[0065.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.750] GetLastError () returned 0x5
	[0065.750] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0065.750] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.750] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0065.750] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0065.751] SetLastError (dwErrCode=0x0) 
	[0065.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.751] GetLastError () returned 0x5
	[0065.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0065.751] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 0
	[0065.751] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0065.751] SetLastError (dwErrCode=0x0) 
	[0065.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.751] GetLastError () returned 0x5
	[0065.751] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.751] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15fec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbd4d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83189ec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831fc5e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831fc5e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0065.751] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83189ec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8383e900, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c530, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Appshapi.dll", cAlternateFileName="")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppSharingChromeHook64.dll", cAlternateFileName="APPSHA~2.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf77004f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AppSharingHookController64.exe", cAlternateFileName="APPSHA~1.EXE")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7c11d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25048, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="appsharingmediaprovider.dll", cAlternateFileName="APPSHA~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1688e076, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57730, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="appshcom.dll", cAlternateFileName="")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x341130, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="appshvw.dll", cAlternateFileName="")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa98, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x223c78, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AutoHelper.dll", cAlternateFileName="AUTOHE~1.DLL")) returned 1
	[0065.752] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66bc, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1
	[0065.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3560
	[0065.753] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.754] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1
	[0065.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3db0
	[0065.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.755] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1
	[0065.755] SetLastError (dwErrCode=0x0) 
	[0065.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.755] GetLastError () returned 0x5
	[0065.755] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.755] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.756] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.756] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7925, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Author2String.XSL", cAlternateFileName="AUTHOR~2.XSL")) returned 1
	[0065.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x401c
	[0065.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.758] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Author2XML.XSL", cAlternateFileName="AUTHOR~1.XSL")) returned 1
	[0065.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4020
	[0065.759] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.759] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Sort", cAlternateFileName="")) returned 1
	[0065.759] SetLastError (dwErrCode=0x0) 
	[0065.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.759] GetLastError () returned 0x5
	[0065.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0065.760] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.760] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0065.761] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.761] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b62, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUTHOR.XSL", cAlternateFileName="")) returned 1
	[0065.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4028
	[0065.761] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.762] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TAG.XSL", cAlternateFileName="")) returned 1
	[0065.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x402c
	[0065.762] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.763] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17774bfd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c3e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TITLE.XSL", cAlternateFileName="")) returned 1
	[0065.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4030
	[0065.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.764] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 1
	[0065.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4034
	[0065.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.765] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x176dc2d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x176dc2d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8bee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YEAR.XSL", cAlternateFileName="")) returned 0
	[0065.765] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0065.765] SetLastError (dwErrCode=0x0) 
	[0065.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.765] GetLastError () returned 0x5
	[0065.765] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0065.765] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.765] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Style", cAlternateFileName="")) returned 1
	[0065.765] SetLastError (dwErrCode=0x0) 
	[0065.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.766] GetLastError () returned 0x5
	[0065.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0065.766] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0065.947] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.947] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1
	[0065.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4038
	[0065.948] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.948] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3c47588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1
	[0065.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x403c
	[0065.949] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.949] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3d0601b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GB.XSL", cAlternateFileName="")) returned 1
	[0065.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4040
	[0065.950] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.950] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d1454c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d1454c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1
	[0065.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4044
	[0065.951] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.951] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2bbceb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2bbceb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1
	[0065.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4048
	[0065.952] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.952] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3c47588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1
	[0065.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x404c
	[0065.953] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.953] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d1454c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d1454c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1
	[0065.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4050
	[0065.954] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.954] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2bbceb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2bbceb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1
	[0065.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4054
	[0065.955] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.955] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2ad8211, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1
	[0065.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4058
	[0065.956] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.956] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2ad8211, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1
	[0065.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x405c
	[0065.959] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.960] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc38b3c05, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3aa3bf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1
	[0065.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4060
	[0065.961] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.961] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3bd4d47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3bd4d47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1
	[0065.961] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4064
	[0065.962] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.962] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3bd4d47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3bd4d47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0
	[0065.962] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0065.963] SetLastError (dwErrCode=0x0) 
	[0065.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.965] GetLastError () returned 0x5
	[0065.965] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0065.965] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.965] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Style", cAlternateFileName="")) returned 0
	[0065.965] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.965] SetLastError (dwErrCode=0x0) 
	[0065.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.966] GetLastError () returned 0x5
	[0065.966] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.966] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.966] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0065.966] SetLastError (dwErrCode=0x0) 
	[0065.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.966] GetLastError () returned 0x5
	[0065.966] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.966] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0065.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.968] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7df6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART1.BDR", cAlternateFileName="")) returned 1
	[0065.968] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4024
	[0065.968] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.969] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART10.BDR", cAlternateFileName="")) returned 1
	[0065.969] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4068
	[0065.970] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.970] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART11.BDR", cAlternateFileName="")) returned 1
	[0065.970] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x406c
	[0065.971] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.971] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe584, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART12.BDR", cAlternateFileName="")) returned 1
	[0065.971] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4070
	[0065.972] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.972] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17774bfd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1780d5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ed0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART13.BDR", cAlternateFileName="")) returned 1
	[0065.972] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4074
	[0065.973] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.973] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART14.BDR", cAlternateFileName="")) returned 1
	[0065.973] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4078
	[0065.974] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.974] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART15.BDR", cAlternateFileName="")) returned 1
	[0065.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x407c
	[0065.974] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.975] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb854, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART2.BDR", cAlternateFileName="")) returned 1
	[0065.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4080
	[0065.975] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.975] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe12e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART3.BDR", cAlternateFileName="")) returned 1
	[0065.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4084
	[0065.976] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.976] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1770252c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1770252c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3902, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART4.BDR", cAlternateFileName="")) returned 1
	[0065.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4088
	[0065.977] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.977] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17774bfd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1780d5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART5.BDR", cAlternateFileName="")) returned 1
	[0065.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x408c
	[0065.978] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.978] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART6.BDR", cAlternateFileName="")) returned 1
	[0065.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4090
	[0065.979] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.979] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART7.BDR", cAlternateFileName="")) returned 1
	[0065.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4094
	[0065.980] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.980] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbfca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART8.BDR", cAlternateFileName="")) returned 1
	[0065.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4098
	[0065.981] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.981] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 1
	[0065.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x409c
	[0065.982] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.982] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc696, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSART9.BDR", cAlternateFileName="")) returned 0
	[0065.982] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0065.983] SetLastError (dwErrCode=0x0) 
	[0065.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.985] GetLastError () returned 0x5
	[0065.985] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.985] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.985] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0065.985] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1
	[0065.985] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc31d8fc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf4258, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CHART.DLL", cAlternateFileName="")) returned 1
	[0065.986] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe206bc31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef8a36d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76658, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1
	[0065.986] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1754c10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36e40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1
	[0065.986] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c89, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CommunicatorContentBinApp.xap", cAlternateFileName="COMMUN~1.XAP")) returned 1
	[0065.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f20
	[0065.986] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.987] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0065.987] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0065.987] SetLastError (dwErrCode=0x0) 
	[0065.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.987] GetLastError () returned 0x5
	[0065.987] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.987] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0065.989] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.989] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x438, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="card_expiration_terms_dict.txt", cAlternateFileName="CARD_E~1.TXT")) returned 1
	[0065.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40a4
	[0065.990] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.991] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="card_security_terms_dict.txt", cAlternateFileName="CARD_S~1.TXT")) returned 1
	[0065.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40a8
	[0065.993] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.993] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="card_terms_dict.txt", cAlternateFileName="CARD_T~1.TXT")) returned 1
	[0065.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40ac
	[0065.994] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.994] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1774e9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10283, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="config.xml", cAlternateFileName="")) returned 1
	[0065.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40b0
	[0065.995] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.995] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x171e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ssn_high_group_info.txt", cAlternateFileName="SSN_HI~1.TXT")) returned 1
	[0065.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0065.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40b4
	[0065.996] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0065.996] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17728794, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x171e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ssn_high_group_info.txt", cAlternateFileName="SSN_HI~1.TXT")) returned 0
	[0065.996] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0065.997] SetLastError (dwErrCode=0x0) 
	[0065.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.999] GetLastError () returned 0x5
	[0065.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.999] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.999] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0065.999] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CONVERT", cAlternateFileName="")) returned 1
	[0065.999] SetLastError (dwErrCode=0x0) 
	[0065.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.999] GetLastError () returned 0x5
	[0065.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0065.999] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0065.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0066.000] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.000] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0066.000] SetLastError (dwErrCode=0x0) 
	[0066.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.001] GetLastError () returned 0x5
	[0066.001] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.001] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.001] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0066.002] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.002] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DELIMR.FAE", cAlternateFileName="")) returned 1
	[0066.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40bc
	[0066.003] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.004] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LOCALDV.DLL", cAlternateFileName="")) returned 1
	[0066.004] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec4ee541, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec5f95b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLADDR.FAE", cAlternateFileName="")) returned 1
	[0066.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40c0
	[0066.004] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.005] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLAPPTR.FAE", cAlternateFileName="")) returned 1
	[0066.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40c4
	[0066.005] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.006] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLJRNLR.FAE", cAlternateFileName="")) returned 1
	[0066.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40c8
	[0066.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.007] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2af0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLMAILR.FAE", cAlternateFileName="")) returned 1
	[0066.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40cc
	[0066.007] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.008] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLNOTER.FAE", cAlternateFileName="")) returned 1
	[0066.008] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40d0
	[0066.008] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.009] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLR.SAM", cAlternateFileName="")) returned 1
	[0066.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40d4
	[0066.009] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.010] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed388c20, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3290, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLTASKR.FAE", cAlternateFileName="")) returned 1
	[0066.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40d8
	[0066.010] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.011] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefca9683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefca9683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefccf8e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 1
	[0066.011] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefca9683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefca9683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefccf8e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TRANSMRR.DLL", cAlternateFileName="")) returned 0
	[0066.011] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0066.012] SetLastError (dwErrCode=0x0) 
	[0066.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.014] GetLastError () returned 0x5
	[0066.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.014] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.014] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b60d2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b60d2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0066.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40b8
	[0066.015] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.015] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DESKSAM.SAM", cAlternateFileName="")) returned 1
	[0066.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40dc
	[0066.016] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.016] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OL.SAM", cAlternateFileName="")) returned 1
	[0066.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40e0
	[0066.017] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.017] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLADD.FAE", cAlternateFileName="")) returned 1
	[0066.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40e4
	[0066.018] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.018] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e8f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLAPPT.FAE", cAlternateFileName="")) returned 1
	[0066.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40e8
	[0066.019] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.019] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLJRNL.FAE", cAlternateFileName="")) returned 1
	[0066.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40ec
	[0066.020] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.021] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLMAIL.FAE", cAlternateFileName="")) returned 1
	[0066.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40f0
	[0066.022] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.022] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLNOTE.FAE", cAlternateFileName="")) returned 1
	[0066.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40f4
	[0066.023] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.023] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ce78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLTASK.FAE", cAlternateFileName="")) returned 1
	[0066.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40f8
	[0066.024] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.024] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc6b9190, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc6b9190, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19248, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RM.DLL", cAlternateFileName="")) returned 1
	[0066.024] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 1
	[0066.024] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TRANSMGR.DLL", cAlternateFileName="")) returned 0
	[0066.024] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0066.024] SetLastError (dwErrCode=0x0) 
	[0066.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.025] GetLastError () returned 0x5
	[0066.025] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0066.025] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f8c60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="csi.dll", cAlternateFileName="")) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e270, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CSIRESOURCES.DLL", cAlternateFileName="CSIRES~1.DLL")) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x904f8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cd1a25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cd1a25, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbacf8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a8396f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba890, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1
	[0066.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1
	[0066.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40a0
	[0066.026] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.026] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x85cb0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1
	[0066.026] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0b2f3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde2222ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0066.026] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x122a48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1
	[0066.026] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8b8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1
	[0066.026] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1
	[0066.026] SetLastError (dwErrCode=0x0) 
	[0066.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.027] GetLastError () returned 0x5
	[0066.027] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0066.027] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0066.028] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.028] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0066.028] SetLastError (dwErrCode=0x0) 
	[0066.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.028] GetLastError () returned 0x5
	[0066.028] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.028] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbfb0
	[0066.029] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.029] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="16", cAlternateFileName="")) returned 1
	[0066.029] SetLastError (dwErrCode=0x0) 
	[0066.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.029] GetLastError () returned 0x5
	[0066.029] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.029] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.029] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0066.029] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.029] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
	[0066.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4108
	[0066.030] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.031] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0
	[0066.031] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0066.031] SetLastError (dwErrCode=0x0) 
	[0066.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.031] GetLastError () returned 0x5
	[0066.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.031] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.031] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="16", cAlternateFileName="")) returned 0
	[0066.031] FindClose (in: hFindFile=0x274bd1fbfb0 | out: hFindFile=0x274bd1fbfb0) returned 1
	[0066.031] SetLastError (dwErrCode=0x0) 
	[0066.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.031] GetLastError () returned 0x5
	[0066.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.032] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.032] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 0
	[0066.032] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0066.032] SetLastError (dwErrCode=0x0) 
	[0066.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.032] GetLastError () returned 0x5
	[0066.032] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0066.032] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.032] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0066.032] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3e7feda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x344a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1
	[0066.032] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x899050, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1
	[0066.032] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1beddbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1beddbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x374a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ELECTRICAL.VSL", cAlternateFileName="ELECTR~1.VSL")) returned 1
	[0066.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40fc
	[0066.033] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.033] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25cc8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1
	[0066.033] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d10a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1
	[0066.033] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1
	[0066.033] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1
	[0066.033] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ac68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1
	[0066.034] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52eea7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20d8840, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1
	[0066.034] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc54dd8eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x61f, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1
	[0066.034] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EXCEL.VisualElementsManifest.xml", cAlternateFileName="EXCELV~1.XML")) returned 1
	[0066.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4100
	[0066.034] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.035] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1
	[0066.035] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24be028, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="excelcnv.exe.manifest", cAlternateFileName="EXCELC~1.MAN")) returned 1
	[0066.035] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16440, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1
	[0066.035] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67030, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1
	[0066.035] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1469b, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ExtensibleApp.xap", cAlternateFileName="EXTENS~1.XAP")) returned 1
	[0066.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4104
	[0066.036] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.391] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16da48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1
	[0066.391] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ccc0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="FilterModule.dll", cAlternateFileName="FILTER~1.DLL")) returned 1
	[0066.397] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2687c83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc5640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="FIRSTRUN.EXE", cAlternateFileName="")) returned 1
	[0066.397] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="FIRSTRUN.VisualElementsManifest.xml", cAlternateFileName="FIRSTR~1.XML")) returned 1
	[0066.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x410c
	[0066.398] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.399] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0066.399] SetLastError (dwErrCode=0x0) 
	[0066.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.399] GetLastError () returned 0x5
	[0066.399] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0066.399] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.399] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0066.399] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.399] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0066.400] SetLastError (dwErrCode=0x0) 
	[0066.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.400] GetLastError () returned 0x5
	[0066.400] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.400] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0066.402] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.403] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTIVITL.ICO", cAlternateFileName="")) returned 1
	[0066.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4118
	[0066.403] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.404] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTIVITS.ICO", cAlternateFileName="")) returned 1
	[0066.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x411c
	[0066.404] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.405] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTIVITY.CFG", cAlternateFileName="")) returned 1
	[0066.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4120
	[0066.405] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.406] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPT.CFG", cAlternateFileName="")) returned 1
	[0066.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4124
	[0066.406] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.407] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPTL.ICO", cAlternateFileName="")) returned 1
	[0066.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4128
	[0066.407] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.408] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPTS.ICO", cAlternateFileName="")) returned 1
	[0066.408] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.408] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x412c
	[0066.408] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.409] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CNFNOT.CFG", cAlternateFileName="")) returned 1
	[0066.409] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4130
	[0066.409] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.410] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CNFNOT.ICO", cAlternateFileName="")) returned 1
	[0066.410] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.410] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4134
	[0066.410] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.411] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CNFRES.CFG", cAlternateFileName="")) returned 1
	[0066.411] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4138
	[0066.412] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.412] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONFLICT.ICO", cAlternateFileName="")) returned 1
	[0066.412] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x413c
	[0066.413] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.413] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONTACT.CFG", cAlternateFileName="")) returned 1
	[0066.413] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4140
	[0066.414] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.414] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONTACTL.ICO", cAlternateFileName="")) returned 1
	[0066.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4144
	[0066.415] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.415] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONTACTS.ICO", cAlternateFileName="")) returned 1
	[0066.415] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4148
	[0066.416] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.416] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x325, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DISTLIST.CFG", cAlternateFileName="")) returned 1
	[0066.416] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x414c
	[0066.417] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.417] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DISTLSTL.ICO", cAlternateFileName="")) returned 1
	[0066.417] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4150
	[0066.418] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.418] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DISTLSTS.ICO", cAlternateFileName="")) returned 1
	[0066.418] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4154
	[0066.419] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.419] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7cf588, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7cf588, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOC.CFG", cAlternateFileName="")) returned 1
	[0066.419] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4158
	[0066.420] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.421] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOCL.ICO", cAlternateFileName="")) returned 1
	[0066.421] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.421] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x415c
	[0066.421] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.422] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOCS.ICO", cAlternateFileName="")) returned 1
	[0066.422] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4160
	[0066.422] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.423] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7cf588, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXITEM.CFG", cAlternateFileName="")) returned 1
	[0066.423] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4164
	[0066.423] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.424] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb548de7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb5e174f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXITEML.ICO", cAlternateFileName="")) returned 1
	[0066.424] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.424] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4168
	[0066.424] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.425] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXITEMS.ICO", cAlternateFileName="")) returned 1
	[0066.425] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x416c
	[0066.425] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.426] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INFOMAIL.CFG", cAlternateFileName="")) returned 1
	[0066.426] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4170
	[0066.426] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.513] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INFOML.ICO", cAlternateFileName="")) returned 1
	[0066.513] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.514] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4174
	[0066.514] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.514] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INFOMS.ICO", cAlternateFileName="")) returned 1
	[0066.514] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4178
	[0066.515] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.515] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IPM.CFG", cAlternateFileName="")) returned 1
	[0066.515] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.516] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x417c
	[0066.516] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.516] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7a9345, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7a9345, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb7a9345, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IPML.ICO", cAlternateFileName="")) returned 1
	[0066.516] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4180
	[0066.517] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.517] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IPMS.ICO", cAlternateFileName="")) returned 1
	[0066.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.518] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4184
	[0066.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.518] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MMSL.ICO", cAlternateFileName="")) returned 1
	[0066.518] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4188
	[0066.519] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.519] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MMSS.ICO", cAlternateFileName="")) returned 1
	[0066.519] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x418c
	[0066.520] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.520] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NOTE.CFG", cAlternateFileName="")) returned 1
	[0066.520] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4190
	[0066.521] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.521] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NOTEL.ICO", cAlternateFileName="")) returned 1
	[0066.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.522] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4194
	[0066.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.522] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NOTES.ICO", cAlternateFileName="")) returned 1
	[0066.523] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4198
	[0066.523] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.523] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OMSMMS.CFG", cAlternateFileName="")) returned 1
	[0066.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.524] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x419c
	[0066.524] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.525] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OMSSMS.CFG", cAlternateFileName="")) returned 1
	[0066.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41a0
	[0066.528] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.528] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OOFL.ICO", cAlternateFileName="")) returned 1
	[0066.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41a4
	[0066.529] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.529] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OOFS.ICO", cAlternateFileName="")) returned 1
	[0066.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41a8
	[0066.530] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.530] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OOFTMPL.CFG", cAlternateFileName="")) returned 1
	[0066.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.530] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41ac
	[0066.531] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.531] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb43bdd5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POST.CFG", cAlternateFileName="")) returned 1
	[0066.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41b0
	[0066.532] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.532] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTIT.CFG", cAlternateFileName="")) returned 1
	[0066.532] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41b4
	[0066.533] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.533] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTITL.ICO", cAlternateFileName="")) returned 1
	[0066.533] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.533] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41b8
	[0066.534] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.534] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTITS.ICO", cAlternateFileName="")) returned 1
	[0066.534] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.534] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41bc
	[0066.535] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.535] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTL.ICO", cAlternateFileName="")) returned 1
	[0066.535] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.535] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c0
	[0066.536] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.537] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTS.ICO", cAlternateFileName="")) returned 1
	[0066.537] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.537] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c4
	[0066.537] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.538] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RCLRPT.CFG", cAlternateFileName="")) returned 1
	[0066.538] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.538] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c8
	[0066.538] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.539] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x651, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REC.CFG", cAlternateFileName="")) returned 1
	[0066.539] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.539] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41cc
	[0066.540] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.540] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RECL.ICO", cAlternateFileName="")) returned 1
	[0066.540] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.540] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41d0
	[0066.541] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.541] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RECS.ICO", cAlternateFileName="")) returned 1
	[0066.541] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41d4
	[0066.542] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.542] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb43bdd5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb43bdd5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REMOTE.CFG", cAlternateFileName="")) returned 1
	[0066.542] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.543] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41d8
	[0066.543] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.543] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REMOTEL.ICO", cAlternateFileName="")) returned 1
	[0066.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41dc
	[0066.544] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.544] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REMOTES.ICO", cAlternateFileName="")) returned 1
	[0066.544] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41e0
	[0066.545] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.546] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REPLTMPL.CFG", cAlternateFileName="")) returned 1
	[0066.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41e4
	[0066.546] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.547] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REPORT.CFG", cAlternateFileName="")) returned 1
	[0066.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41e8
	[0066.547] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.548] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REPORTL.ICO", cAlternateFileName="")) returned 1
	[0066.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41ec
	[0066.548] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.549] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REPORTS.ICO", cAlternateFileName="")) returned 1
	[0066.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41f0
	[0066.549] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.550] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RESEND.CFG", cAlternateFileName="")) returned 1
	[0066.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41f4
	[0066.550] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.551] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RESENDL.ICO", cAlternateFileName="")) returned 1
	[0066.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41f8
	[0066.551] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.625] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RESENDS.ICO", cAlternateFileName="")) returned 1
	[0066.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41fc
	[0066.625] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.626] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RSSITEM.CFG", cAlternateFileName="")) returned 1
	[0066.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4200
	[0066.626] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.626] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RSSITEML.ICO", cAlternateFileName="")) returned 1
	[0066.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4204
	[0066.627] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.627] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RSSITEMS.ICO", cAlternateFileName="")) returned 1
	[0066.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4208
	[0066.628] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.628] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDCNCLL.ICO", cAlternateFileName="")) returned 1
	[0066.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x420c
	[0066.628] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.628] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDCNCLS.ICO", cAlternateFileName="")) returned 1
	[0066.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4210
	[0066.629] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.629] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDREQL.ICO", cAlternateFileName="")) returned 1
	[0066.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4214
	[0066.630] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.630] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDREQS.ICO", cAlternateFileName="")) returned 1
	[0066.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4218
	[0066.631] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.631] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDRESNL.ICO", cAlternateFileName="")) returned 1
	[0066.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x421c
	[0066.632] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.632] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDRESNS.ICO", cAlternateFileName="")) returned 1
	[0066.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4220
	[0066.632] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.633] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDRESPL.ICO", cAlternateFileName="")) returned 1
	[0066.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4224
	[0066.633] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.633] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb461f79, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb461f79, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb461f79, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDRESPS.ICO", cAlternateFileName="")) returned 1
	[0066.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4228
	[0066.635] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.635] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDRESTL.ICO", cAlternateFileName="")) returned 1
	[0066.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x422c
	[0066.636] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.636] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCDRESTS.ICO", cAlternateFileName="")) returned 1
	[0066.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4230
	[0066.636] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.637] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHDCNCL.CFG", cAlternateFileName="")) returned 1
	[0066.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4234
	[0066.637] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.637] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4af, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHDREQ.CFG", cAlternateFileName="")) returned 1
	[0066.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4238
	[0066.638] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.638] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHDRESN.CFG", cAlternateFileName="")) returned 1
	[0066.638] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.638] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x423c
	[0066.639] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.639] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHDRESP.CFG", cAlternateFileName="")) returned 1
	[0066.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4240
	[0066.639] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.640] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHDREST.CFG", cAlternateFileName="")) returned 1
	[0066.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4244
	[0066.640] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.640] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SECREC.CFG", cAlternateFileName="")) returned 1
	[0066.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4248
	[0066.641] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.641] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SECRECL.ICO", cAlternateFileName="")) returned 1
	[0066.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x424c
	[0066.642] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.642] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4881c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SECRECS.ICO", cAlternateFileName="")) returned 1
	[0066.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4250
	[0066.642] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.643] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SECURE.CFG", cAlternateFileName="")) returned 1
	[0066.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4254
	[0066.643] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.643] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SECURL.ICO", cAlternateFileName="")) returned 1
	[0066.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4258
	[0066.644] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.644] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SECURS.ICO", cAlternateFileName="")) returned 1
	[0066.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x425c
	[0066.645] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.645] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x303, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SHARING.CFG", cAlternateFileName="")) returned 1
	[0066.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4260
	[0066.646] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.646] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGN.CFG", cAlternateFileName="")) returned 1
	[0066.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4264
	[0066.646] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.646] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGNL.ICO", cAlternateFileName="")) returned 1
	[0066.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4268
	[0066.647] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.647] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGNS.ICO", cAlternateFileName="")) returned 1
	[0066.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x426c
	[0066.648] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.648] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SMIMEE.CFG", cAlternateFileName="")) returned 1
	[0066.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4270
	[0066.648] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.649] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SMIMES.CFG", cAlternateFileName="")) returned 1
	[0066.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4274
	[0066.649] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.649] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4881c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4881c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SMSL.ICO", cAlternateFileName="")) returned 1
	[0066.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4278
	[0066.650] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.650] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SMSS.ICO", cAlternateFileName="")) returned 1
	[0066.650] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x427c
	[0066.651] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.651] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASK.CFG", cAlternateFileName="")) returned 1
	[0066.651] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4280
	[0066.651] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.652] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKACC.CFG", cAlternateFileName="")) returned 1
	[0066.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4284
	[0066.652] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.652] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKACCL.ICO", cAlternateFileName="")) returned 1
	[0066.652] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4288
	[0066.653] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.653] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKACCS.ICO", cAlternateFileName="")) returned 1
	[0066.653] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x428c
	[0066.654] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.654] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKDEC.CFG", cAlternateFileName="")) returned 1
	[0066.654] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4290
	[0066.654] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.655] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKDECL.ICO", cAlternateFileName="")) returned 1
	[0066.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4294
	[0066.655] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.655] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKDECS.ICO", cAlternateFileName="")) returned 1
	[0066.655] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4298
	[0066.656] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.656] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKL.ICO", cAlternateFileName="")) returned 1
	[0066.656] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x429c
	[0066.657] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.657] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4ae41a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKREQ.CFG", cAlternateFileName="")) returned 1
	[0066.657] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42a0
	[0066.657] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.658] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKREQL.ICO", cAlternateFileName="")) returned 1
	[0066.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42a4
	[0066.658] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.658] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKREQS.ICO", cAlternateFileName="")) returned 1
	[0066.658] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42a8
	[0066.659] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.659] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4ae41a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKS.ICO", cAlternateFileName="")) returned 1
	[0066.659] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42ac
	[0066.660] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.660] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 1
	[0066.660] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42b0
	[0066.661] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.661] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKUPD.CFG", cAlternateFileName="")) returned 0
	[0066.661] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0066.753] SetLastError (dwErrCode=0x0) 
	[0066.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.753] GetLastError () returned 0x5
	[0066.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.753] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 0
	[0066.753] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0066.753] SetLastError (dwErrCode=0x0) 
	[0066.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.753] GetLastError () returned 0x5
	[0066.753] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0066.753] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x701c60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17ff3259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x485ec0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GKPowerPoint.dll", cAlternateFileName="GKPOWE~1.DLL")) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x528860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GKWord.dll", cAlternateFileName="")) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x574260, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GRAPH.EXE", cAlternateFileName="")) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2661a3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2661a3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2877b8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x530, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Graph.exe.manifest", cAlternateFileName="GRAPHE~1.MAN")) returned 1
	[0066.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GRAPH.ICO", cAlternateFileName="")) returned 1
	[0066.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4110
	[0066.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.754] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0066.754] SetLastError (dwErrCode=0x0) 
	[0066.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.754] GetLastError () returned 0x5
	[0066.755] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0066.755] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0066.756] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.756] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0066.756] SetLastError (dwErrCode=0x0) 
	[0066.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.756] GetLastError () returned 0x5
	[0066.756] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.756] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0066.756] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ff3259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x186355ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.756] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groove.net", cAlternateFileName="")) returned 1
	[0066.756] SetLastError (dwErrCode=0x0) 
	[0066.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.756] GetLastError () returned 0x5
	[0066.756] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.756] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.757] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0066.757] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.757] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1
	[0066.757] SetLastError (dwErrCode=0x0) 
	[0066.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.757] GetLastError () returned 0x5
	[0066.757] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.757] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.757] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0066.758] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18aadbcf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.758] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 1
	[0066.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c0
	[0066.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.758] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SignedComponents.cer", cAlternateFileName="SIGNED~1.CER")) returned 0
	[0066.758] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0066.759] SetLastError (dwErrCode=0x0) 
	[0066.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.759] GetLastError () returned 0x5
	[0066.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.759] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.759] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0066.759] SetLastError (dwErrCode=0x0) 
	[0066.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.759] GetLastError () returned 0x5
	[0066.759] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.759] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0066.762] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.762] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 1
	[0066.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c4
	[0066.763] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.763] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SignedManagedObjects.cer", cAlternateFileName="SIGNED~1.CER")) returned 0
	[0066.763] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0066.763] SetLastError (dwErrCode=0x0) 
	[0066.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.763] GetLastError () returned 0x5
	[0066.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.763] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.763] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Servers", cAlternateFileName="")) returned 1
	[0066.763] SetLastError (dwErrCode=0x0) 
	[0066.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.763] GetLastError () returned 0x5
	[0066.763] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.763] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0066.764] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.764] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Management.cer", cAlternateFileName="MANAGE~1.CER")) returned 1
	[0066.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c8
	[0066.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.765] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RELAY.CER", cAlternateFileName="")) returned 1
	[0066.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42cc
	[0066.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.765] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x186355ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RELAY.CER", cAlternateFileName="")) returned 0
	[0066.765] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0066.765] SetLastError (dwErrCode=0x0) 
	[0066.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.766] GetLastError () returned 0x5
	[0066.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.766] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.766] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Servers", cAlternateFileName="")) returned 0
	[0066.766] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0066.766] SetLastError (dwErrCode=0x0) 
	[0066.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.766] GetLastError () returned 0x5
	[0066.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.766] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.766] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0066.766] SetLastError (dwErrCode=0x0) 
	[0066.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.766] GetLastError () returned 0x5
	[0066.766] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.766] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0066.766] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.766] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 1
	[0066.766] SetLastError (dwErrCode=0x0) 
	[0066.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.767] GetLastError () returned 0x5
	[0066.767] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.767] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0066.768] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.768] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VeriSign_Class_3_Code_Signing_2001-4_CA.cer", cAlternateFileName="VERISI~2.CER")) returned 1
	[0066.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42d0
	[0066.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.769] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VeriSign_Class_3_Public_Primary_CA.cer", cAlternateFileName="VERISI~1.CER")) returned 1
	[0066.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42d4
	[0066.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.770] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 1
	[0066.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42d8
	[0066.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.771] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VS_ComponentSigningIntermediate.cer", cAlternateFileName="VS_COM~1.CER")) returned 0
	[0066.771] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0066.771] SetLastError (dwErrCode=0x0) 
	[0066.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.773] GetLastError () returned 0x5
	[0066.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0066.773] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.773] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0
	[0066.773] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0066.773] SetLastError (dwErrCode=0x0) 
	[0066.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.773] GetLastError () returned 0x5
	[0066.773] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.773] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.773] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0066.773] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0066.774] SetLastError (dwErrCode=0x0) 
	[0066.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.774] GetLastError () returned 0x5
	[0066.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.774] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.774] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0066.774] SetLastError (dwErrCode=0x0) 
	[0066.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.774] GetLastError () returned 0x5
	[0066.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.774] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0066.774] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.774] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="People", cAlternateFileName="")) returned 1
	[0066.774] SetLastError (dwErrCode=0x0) 
	[0066.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.774] GetLastError () returned 0x5
	[0066.774] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.774] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0066.776] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18a3b641, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.776] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18aadbcf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18aadbcf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COUGH.WAV", cAlternateFileName="")) returned 1
	[0066.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42bc
	[0066.776] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.777] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIGGLE.WAV", cAlternateFileName="")) returned 1
	[0066.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42dc
	[0066.777] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.777] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HICCUP.WAV", cAlternateFileName="")) returned 1
	[0066.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42e0
	[0066.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.778] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MMHMM.WAV", cAlternateFileName="")) returned 1
	[0066.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42e4
	[0066.781] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.781] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SNEEZE.WAV", cAlternateFileName="")) returned 1
	[0066.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42e8
	[0066.781] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.781] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d36, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THROAT.WAV", cAlternateFileName="")) returned 1
	[0066.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42ec
	[0066.782] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.782] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 1
	[0066.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42f0
	[0066.783] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.783] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7302, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Whistling.wav", cAlternateFileName="WHISTL~1.WAV")) returned 0
	[0066.783] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0066.784] SetLastError (dwErrCode=0x0) 
	[0066.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.785] GetLastError () returned 0x5
	[0066.785] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.785] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.785] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Places", cAlternateFileName="")) returned 1
	[0066.785] SetLastError (dwErrCode=0x0) 
	[0066.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.786] GetLastError () returned 0x5
	[0066.786] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.786] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0066.788] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.788] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ALARM.WAV", cAlternateFileName="")) returned 1
	[0066.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42f4
	[0066.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BUZZ.WAV", cAlternateFileName="")) returned 1
	[0066.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42f8
	[0066.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.789] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd686, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1
	[0066.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42fc
	[0066.790] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.790] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RADAR.WAV", cAlternateFileName="")) returned 1
	[0066.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4300
	[0066.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.791] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd64a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TOOT.WAV", cAlternateFileName="")) returned 1
	[0066.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4304
	[0066.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.792] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18afa0b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18afa0b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VIBE.WAV", cAlternateFileName="")) returned 1
	[0066.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4308
	[0066.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.792] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18b6c7ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18b6c7ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WARN.WAV", cAlternateFileName="")) returned 1
	[0066.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x430c
	[0066.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.793] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18b6c7ce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18b6c7ce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae8a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WARN.WAV", cAlternateFileName="")) returned 0
	[0066.793] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0066.794] SetLastError (dwErrCode=0x0) 
	[0066.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.795] GetLastError () returned 0x5
	[0066.795] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.795] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.795] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Things", cAlternateFileName="")) returned 1
	[0066.796] SetLastError (dwErrCode=0x0) 
	[0066.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.796] GetLastError () returned 0x5
	[0066.796] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.796] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0066.797] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.797] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAN.WAV", cAlternateFileName="")) returned 1
	[0066.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4310
	[0066.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.798] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COUPLER.WAV", cAlternateFileName="")) returned 1
	[0066.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4314
	[0066.799] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.799] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa412, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HORN.WAV", cAlternateFileName="")) returned 1
	[0066.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4318
	[0066.800] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.800] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18afa0b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb14e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SHOT.WAV", cAlternateFileName="")) returned 1
	[0066.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x431c
	[0066.800] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.801] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf548, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SHOVEL.WAV", cAlternateFileName="")) returned 1
	[0066.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4320
	[0066.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.801] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xedd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPLASH.WAV", cAlternateFileName="")) returned 1
	[0066.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4324
	[0066.802] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.802] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1
	[0066.803] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4328
	[0066.803] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.803] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 0
	[0066.803] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0066.804] SetLastError (dwErrCode=0x0) 
	[0066.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.806] GetLastError () returned 0x5
	[0066.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0066.806] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.806] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Things", cAlternateFileName="")) returned 0
	[0066.806] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0066.806] SetLastError (dwErrCode=0x0) 
	[0066.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.806] GetLastError () returned 0x5
	[0066.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.806] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.806] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0066.806] SetLastError (dwErrCode=0x0) 
	[0066.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.806] GetLastError () returned 0x5
	[0066.806] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0066.806] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.806] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0066.807] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.808] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b6c9560, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DataListIconImages.jpg", cAlternateFileName="DATALI~1.JPG")) returned 1
	[0066.808] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42b8
	[0066.809] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.809] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DataListIconImagesMask.bmp", cAlternateFileName="DATALI~1.BMP")) returned 1
	[0066.809] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x432c
	[0066.810] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.810] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d29, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRIP.JPG", cAlternateFileName="")) returned 1
	[0066.810] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4330
	[0066.811] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.811] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRIPMASK.BMP", cAlternateFileName="")) returned 1
	[0066.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4334
	[0066.811] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.812] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InformationIcon.jpg", cAlternateFileName="INFORM~1.JPG")) returned 1
	[0066.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4338
	[0066.812] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.812] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="InformationIconMask.bmp", cAlternateFileName="INFORM~1.BMP")) returned 1
	[0066.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x433c
	[0066.813] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.813] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x190c9cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x190c9cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197321ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xceed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LoginDialogBackground.jpg", cAlternateFileName="LOGIND~1.JPG")) returned 1
	[0066.813] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4340
	[0066.814] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.814] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x190c9cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x190c9cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LoginTool24x24Images.jpg", cAlternateFileName="LOGINT~1.JPG")) returned 1
	[0066.814] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4344
	[0066.814] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.815] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LoginTool24x24ImagesMask.bmp", cAlternateFileName="LOGINT~1.BMP")) returned 1
	[0066.815] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4348
	[0066.815] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.815] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MessageAttachmentIconImages.jpg", cAlternateFileName="MESSAG~2.JPG")) returned 1
	[0066.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x434c
	[0066.816] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.816] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MessageAttachmentIconImagesMask.bmp", cAlternateFileName="MESSAG~2.BMP")) returned 1
	[0066.816] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4350
	[0066.817] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.817] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MessageHistoryIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1
	[0066.817] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4354
	[0066.818] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.818] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MessageHistoryIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1
	[0066.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4358
	[0066.819] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.819] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3efd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierBackground.jpg", cAlternateFileName="NOBDD0~1.JPG")) returned 1
	[0066.819] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x435c
	[0066.820] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.820] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierBackgroundRTL.jpg", cAlternateFileName="NOTIFI~4.JPG")) returned 1
	[0066.820] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4360
	[0066.821] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.821] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierCloseButton.jpg", cAlternateFileName="NO00D7~1.JPG")) returned 1
	[0066.821] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4364
	[0066.821] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.822] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierDisableDownArrow.jpg", cAlternateFileName="NOTIFI~2.JPG")) returned 1
	[0066.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4368
	[0066.822] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.822] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierDisableUpArrow.jpg", cAlternateFileName="NOTIFI~1.JPG")) returned 1
	[0066.822] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x436c
	[0066.823] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.823] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197321ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197321ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19758458, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierDownArrow.jpg", cAlternateFileName="NOTIFI~3.JPG")) returned 1
	[0066.823] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4370
	[0066.824] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.824] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierUpArrow.jpg", cAlternateFileName="NO6669~1.JPG")) returned 1
	[0066.824] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4374
	[0066.825] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.825] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierWindowMask.bmp", cAlternateFileName="NOTIFI~1.BMP")) returned 1
	[0066.825] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4378
	[0066.825] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.826] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NotifierWindowMaskRTL.bmp", cAlternateFileName="NOTIFI~2.BMP")) returned 1
	[0066.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x437c
	[0066.826] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.826] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutofSyncIconImages.jpg", cAlternateFileName="OUTOFS~1.JPG")) returned 1
	[0066.826] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4380
	[0066.827] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.827] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutofSyncIconImagesMask.bmp", cAlternateFileName="OUTOFS~1.BMP")) returned 1
	[0066.827] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4384
	[0066.828] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.828] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QuestionIcon.jpg", cAlternateFileName="QUESTI~1.JPG")) returned 1
	[0066.828] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4388
	[0066.829] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.829] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QuestionIconMask.bmp", cAlternateFileName="QUESTI~1.BMP")) returned 1
	[0066.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x438c
	[0066.829] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.830] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1977e6ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1977e6ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Shared16x16Images.jpg", cAlternateFileName="SHARED~2.JPG")) returned 1
	[0066.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4390
	[0066.830] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.830] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Shared16x16ImagesMask.bmp", cAlternateFileName="SHARED~1.BMP")) returned 1
	[0066.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4394
	[0066.831] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.831] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19758458, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19758458, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1977e6ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Shared24x24Images.jpg", cAlternateFileName="SHARED~1.JPG")) returned 1
	[0066.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4398
	[0066.832] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.832] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1638, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Shared24x24ImagesMask.bmp", cAlternateFileName="SHARED~2.BMP")) returned 1
	[0066.832] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x439c
	[0066.833] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0066.833] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STOPICON.JPG", cAlternateFileName="")) returned 1
	[0066.833] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0066.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43a0
	[0067.037] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.037] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StopIconMask.bmp", cAlternateFileName="STOPIC~1.BMP")) returned 1
	[0067.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43a4
	[0067.038] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.038] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TaskbarIconImages256Colors.bmp", cAlternateFileName="TASKBA~2.BMP")) returned 1
	[0067.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43a8
	[0067.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.039] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197cab56, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TaskbarIconImagesMask256Colors.bmp", cAlternateFileName="TASKBA~1.BMP")) returned 1
	[0067.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43ac
	[0067.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.040] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2605, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TipsImage.jpg", cAlternateFileName="TIPSIM~1.JPG")) returned 1
	[0067.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43b0
	[0067.040] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.040] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TipsImageMask.bmp", cAlternateFileName="TIPSIM~1.BMP")) returned 1
	[0067.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43b4
	[0067.041] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.041] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 1
	[0067.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43b8
	[0067.042] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.042] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VeriSignLogo.jpg", cAlternateFileName="VERISI~1.JPG")) returned 0
	[0067.042] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0067.043] SetLastError (dwErrCode=0x0) 
	[0067.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.044] GetLastError () returned 0x5
	[0067.044] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.044] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.044] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0067.044] SetLastError (dwErrCode=0x0) 
	[0067.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.044] GetLastError () returned 0x5
	[0067.044] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.044] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.044] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0067.045] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.045] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groove.net", cAlternateFileName="")) returned 1
	[0067.045] SetLastError (dwErrCode=0x0) 
	[0067.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.045] GetLastError () returned 0x5
	[0067.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0067.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0067.045] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.045] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommonData", cAlternateFileName="COMMON~1")) returned 1
	[0067.045] SetLastError (dwErrCode=0x0) 
	[0067.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.045] GetLastError () returned 0x5
	[0067.045] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0067.045] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.045] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0067.047] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.048] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_Auto.jpg", cAlternateFileName="ALERTI~1.JPG")) returned 1
	[0067.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c4
	[0067.048] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.049] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_AutoMask.bmp", cAlternateFileName="ALERTI~1.BMP")) returned 1
	[0067.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c8
	[0067.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.049] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3356, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_ContactHigh.jpg", cAlternateFileName="AL8858~1.JPG")) returned 1
	[0067.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43cc
	[0067.050] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.050] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_ContactHighMask.bmp", cAlternateFileName="AL2220~1.BMP")) returned 1
	[0067.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43d0
	[0067.051] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.051] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f79, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_ContactLow.jpg", cAlternateFileName="ALERTI~4.JPG")) returned 1
	[0067.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43d4
	[0067.051] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.052] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_ContactLowMask.bmp", cAlternateFileName="AL1F1D~1.BMP")) returned 1
	[0067.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43d8
	[0067.053] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.053] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_FileHigh.jpg", cAlternateFileName="ALERTI~3.JPG")) returned 1
	[0067.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43dc
	[0067.053] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.054] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x197cab56, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197cab56, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_FileHighMask.bmp", cAlternateFileName="ALERTI~2.BMP")) returned 1
	[0067.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43e0
	[0067.054] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.054] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_FileOff.jpg", cAlternateFileName="AL97F4~1.JPG")) returned 1
	[0067.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43e4
	[0067.055] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.055] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_FileOffMask.bmp", cAlternateFileName="ALERTI~4.BMP")) returned 1
	[0067.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43e8
	[0067.056] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.056] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13ca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_High.jpg", cAlternateFileName="ALERTI~2.JPG")) returned 1
	[0067.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43ec
	[0067.056] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.057] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_HighMask.bmp", cAlternateFileName="ALERTI~3.BMP")) returned 1
	[0067.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43f0
	[0067.057] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.057] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_Medium.jpg", cAlternateFileName="ALF33C~1.JPG")) returned 1
	[0067.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43f4
	[0067.058] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.058] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_MediumMAsk.bmp", cAlternateFileName="AL441A~1.BMP")) returned 1
	[0067.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43f8
	[0067.061] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.061] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_Off.jpg", cAlternateFileName="AL0F2A~1.JPG")) returned 1
	[0067.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43fc
	[0067.062] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.062] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AlertImage_OffMask.bmp", cAlternateFileName="ALA9A1~1.BMP")) returned 1
	[0067.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4404
	[0067.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.063] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2256, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsIncomingImage.jpg", cAlternateFileName="COMMSI~1.JPG")) returned 1
	[0067.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4408
	[0067.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.064] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsIncomingImageMask.bmp", cAlternateFileName="COMMSI~1.BMP")) returned 1
	[0067.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x440c
	[0067.064] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.064] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsIncomingImageMaskSmall.bmp", cAlternateFileName="COMMSI~2.BMP")) returned 1
	[0067.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4410
	[0067.065] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.065] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1de3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsIncomingImageSmall.jpg", cAlternateFileName="COMMSI~2.JPG")) returned 1
	[0067.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4414
	[0067.066] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.066] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsOutgoingImage.jpg", cAlternateFileName="COMMSO~1.JPG")) returned 1
	[0067.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4418
	[0067.067] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.067] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19817013, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19817013, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19817013, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsOutgoingImageMask.bmp", cAlternateFileName="COMMSO~1.BMP")) returned 1
	[0067.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x441c
	[0067.137] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.137] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x630, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsOutgoingImageMaskSmall.bmp", cAlternateFileName="COMMSO~2.BMP")) returned 1
	[0067.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4420
	[0067.138] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.138] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CommsOutgoingImageSmall.jpg", cAlternateFileName="COMMSO~2.JPG")) returned 1
	[0067.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4424
	[0067.138] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.139] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MessageBoxIconImages.jpg", cAlternateFileName="MESSAG~1.JPG")) returned 1
	[0067.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4428
	[0067.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.139] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MessageBoxIconImagesMask.bmp", cAlternateFileName="MESSAG~1.BMP")) returned 1
	[0067.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x442c
	[0067.140] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.140] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UnreadIcon.jpg", cAlternateFileName="UNREAD~2.JPG")) returned 1
	[0067.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4430
	[0067.141] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.141] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ffe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UnreadIconImages.jpg", cAlternateFileName="UNREAD~1.JPG")) returned 1
	[0067.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4434
	[0067.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.142] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 1
	[0067.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4438
	[0067.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.143] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="UnreadIconImagesMask.bmp", cAlternateFileName="UNREAD~1.BMP")) returned 0
	[0067.143] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0067.143] SetLastError (dwErrCode=0x0) 
	[0067.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.145] GetLastError () returned 0x5
	[0067.145] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0067.145] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.145] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0067.146] SetLastError (dwErrCode=0x0) 
	[0067.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.146] GetLastError () returned 0x5
	[0067.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0067.146] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0067.146] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.147] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="computericon.jpg", cAlternateFileName="COMPUT~1.JPG")) returned 1
	[0067.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x443c
	[0067.147] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.148] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 1
	[0067.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4440
	[0067.148] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.149] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198634b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="computericonMask.bmp", cAlternateFileName="COMPUT~1.BMP")) returned 0
	[0067.149] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0067.149] SetLastError (dwErrCode=0x0) 
	[0067.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.149] GetLastError () returned 0x5
	[0067.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0067.149] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.149] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 0
	[0067.149] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0067.149] SetLastError (dwErrCode=0x0) 
	[0067.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.149] GetLastError () returned 0x5
	[0067.149] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0067.149] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.149] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groove.net", cAlternateFileName="")) returned 0
	[0067.149] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0067.149] SetLastError (dwErrCode=0x0) 
	[0067.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.149] GetLastError () returned 0x5
	[0067.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.150] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.150] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0067.150] SetLastError (dwErrCode=0x0) 
	[0067.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.150] GetLastError () returned 0x5
	[0067.150] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.150] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0067.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59cc74e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59cc74e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ALERT.ICO", cAlternateFileName="")) returned 1
	[0067.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43bc
	[0067.152] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHEVRON.ICO", cAlternateFileName="")) returned 1
	[0067.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c0
	[0067.153] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.153] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPUTER.ICO", cAlternateFileName="")) returned 1
	[0067.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4444
	[0067.154] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.154] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ContactSelector.ico", cAlternateFileName="CONTAC~1.ICO")) returned 1
	[0067.154] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.154] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4448
	[0067.154] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x294dd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GWE.ICO", cAlternateFileName="")) returned 1
	[0067.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444c
	[0067.155] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INCOMING.ICO", cAlternateFileName="")) returned 1
	[0067.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4450
	[0067.156] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.156] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f7aa31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INDOMAIN.ICO", cAlternateFileName="")) returned 1
	[0067.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4454
	[0067.157] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.157] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAIL.ICO", cAlternateFileName="")) returned 1
	[0067.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4458
	[0067.157] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.158] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MANUAL.ICO", cAlternateFileName="")) returned 1
	[0067.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x445c
	[0067.158] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.158] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messageboxalert.ico", cAlternateFileName="MESSAG~3.ICO")) returned 1
	[0067.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4460
	[0067.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.159] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x765018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messageboxerror.ico", cAlternateFileName="MESSAG~2.ICO")) returned 1
	[0067.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4464
	[0067.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.160] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a9d821, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="messageboxinfo.ico", cAlternateFileName="MESSAG~1.ICO")) returned 1
	[0067.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4468
	[0067.161] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.161] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ModifiedTelespace.ico", cAlternateFileName="MODIFI~1.ICO")) returned 1
	[0067.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x446c
	[0067.162] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.162] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFLINE.ICO", cAlternateFileName="")) returned 1
	[0067.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4470
	[0067.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.163] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONLINE.ICO", cAlternateFileName="")) returned 1
	[0067.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4474
	[0067.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.164] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fed144, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fed144, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fed144, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OnLineBusy.ico", cAlternateFileName="ONLINE~2.ICO")) returned 1
	[0067.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4478
	[0067.164] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.164] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf263c7d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf263c7d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OnLineIdle.ico", cAlternateFileName="ONLINE~1.ICO")) returned 1
	[0067.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x447c
	[0067.165] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.165] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutDomain.ico", cAlternateFileName="OUTDOM~1.ICO")) returned 1
	[0067.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4480
	[0067.166] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.166] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTGOING.ICO", cAlternateFileName="")) returned 1
	[0067.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4484
	[0067.167] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.167] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutSyncPC.ico", cAlternateFileName="OUTSYN~1.ICO")) returned 1
	[0067.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4488
	[0067.167] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.168] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PersonalContact.ico", cAlternateFileName="PERSON~1.ICO")) returned 1
	[0067.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x448c
	[0067.168] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.168] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd6924a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd6924a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SessionMember.ico", cAlternateFileName="SESSIO~1.ICO")) returned 1
	[0067.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4490
	[0067.169] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.169] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SessionOwner.ico", cAlternateFileName="SESSIO~2.ICO")) returned 1
	[0067.169] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4494
	[0067.170] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.170] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SpaceSelector.ico", cAlternateFileName="SPACES~1.ICO")) returned 1
	[0067.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4498
	[0067.171] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.171] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf073ddf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf073ddf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StatusAway.ico", cAlternateFileName="STATUS~1.ICO")) returned 1
	[0067.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x449c
	[0067.171] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.172] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StatusDoNotDisturb.ico", cAlternateFileName="STATUS~2.ICO")) returned 1
	[0067.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44a0
	[0067.172] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.172] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StatusOnline.ico", cAlternateFileName="STATUS~3.ICO")) returned 1
	[0067.172] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44a4
	[0067.173] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.173] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TOOLICON.ICO", cAlternateFileName="")) returned 1
	[0067.173] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44a8
	[0067.174] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.174] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2366, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WSS.ICO", cAlternateFileName="")) returned 1
	[0067.174] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6f2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44ac
	[0067.174] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.175] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 1
	[0067.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d72970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44b0
	[0067.175] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.176] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WSS_DocLib.ico", cAlternateFileName="WSS_DO~1.ICO")) returned 0
	[0067.176] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0067.176] SetLastError (dwErrCode=0x0) 
	[0067.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.178] GetLastError () returned 0x5
	[0067.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.178] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.178] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 0
	[0067.178] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0067.179] SetLastError (dwErrCode=0x0) 
	[0067.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.179] GetLastError () returned 0x5
	[0067.179] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0067.179] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.179] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0067.179] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GROOVE.VisualElementsManifest.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0067.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d76040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4114
	[0067.180] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.180] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1
	[0067.180] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2f, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="HeaderPatterns.xml", cAlternateFileName="HEADER~1.XML")) returned 1
	[0067.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d79710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42b4
	[0067.181] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.181] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8da50, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="HVAC.DLL", cAlternateFileName="")) returned 1
	[0067.181] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc316698e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc316698e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc33c8ea0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x478a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="IEAWSDC.DLL", cAlternateFileName="")) returned 1
	[0067.181] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee295a70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0f0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="IEContentService.exe", cAlternateFileName="IECONT~1.EXE")) returned 1
	[0067.181] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5f4be42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5f4be42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd95d6d40, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xabb640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="IGX.DLL", cAlternateFileName="")) returned 1
	[0067.181] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5000, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Installed_resources16.xss", cAlternateFileName="INSTAL~1.XSS")) returned 1
	[0067.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d7cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44b4
	[0067.182] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.182] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Installed_schemas16.xss", cAlternateFileName="INSTAL~2.XSS")) returned 1
	[0067.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d804b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44b8
	[0067.182] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.183] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3226418, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x658f8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Interceptor.dll", cAlternateFileName="INTERC~1.DLL")) returned 1
	[0067.183] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2d87bf9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Interceptor.tlb", cAlternateFileName="INTERC~1.TLB")) returned 1
	[0067.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d83b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44bc
	[0067.183] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.184] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="INTLDATE.DLL", cAlternateFileName="")) returned 1
	[0067.184] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2a40778, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2a40778, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2be41af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x312a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="JitV.dll", cAlternateFileName="")) returned 1
	[0067.184] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xa1658, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="LGND.DLL", cAlternateFileName="")) returned 1
	[0067.184] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Library", cAlternateFileName="")) returned 1
	[0067.184] SetLastError (dwErrCode=0x0) 
	[0067.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.184] GetLastError () returned 0x5
	[0067.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0067.184] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.184] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0067.184] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.184] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Analysis", cAlternateFileName="")) returned 1
	[0067.184] SetLastError (dwErrCode=0x0) 
	[0067.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.184] GetLastError () returned 0x5
	[0067.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.184] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0067.186] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.186] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ANALYS32.XLL", cAlternateFileName="")) returned 1
	[0067.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d87250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c8
	[0067.186] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.187] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaed2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ATPVBAEN.XLAM", cAlternateFileName="ATPVBA~1.XLA")) returned 1
	[0067.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44cc
	[0067.187] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf7b1fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf7b1fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x279af, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FUNCRES.XLAM", cAlternateFileName="FUNCRE~1.XLA")) returned 1
	[0067.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8dff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44d0
	[0067.188] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 1
	[0067.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d916c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44d4
	[0067.189] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf54f91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf54f91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf030, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROCDB.XLAM", cAlternateFileName="PROCDB~1.XLA")) returned 0
	[0067.189] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0067.190] SetLastError (dwErrCode=0x0) 
	[0067.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.192] GetLastError () returned 0x5
	[0067.192] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.192] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.192] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0067.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d94d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c4
	[0067.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.193] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVER", cAlternateFileName="")) returned 1
	[0067.193] SetLastError (dwErrCode=0x0) 
	[0067.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.193] GetLastError () returned 0x5
	[0067.193] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.193] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.193] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0067.193] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.193] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8dfb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVER.XLAM", cAlternateFileName="SOLVER~1.XLA")) returned 1
	[0067.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d98460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44dc
	[0067.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.194] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35438, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 1
	[0067.194] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35438, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVER32.DLL", cAlternateFileName="")) returned 0
	[0067.194] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0067.194] SetLastError (dwErrCode=0x0) 
	[0067.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.194] GetLastError () returned 0x5
	[0067.194] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0067.195] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.195] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0067.195] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0067.195] SetLastError (dwErrCode=0x0) 
	[0067.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.195] GetLastError () returned 0x5
	[0067.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0067.195] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.195] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1
	[0067.195] SetLastError (dwErrCode=0x0) 
	[0067.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.195] GetLastError () returned 0x5
	[0067.195] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0067.195] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0067.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0067.197] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-black_scale-100.png", cAlternateFileName="EXDF79~1.PNG")) returned 1
	[0067.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44d8
	[0067.201] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.202] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-black_scale-140.png", cAlternateFileName="EX9DAA~1.PNG")) returned 1
	[0067.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44e0
	[0067.203] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.203] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-black_scale-180.png", cAlternateFileName="EXD3EA~1.PNG")) returned 1
	[0067.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da28d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44e4
	[0067.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.204] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-black_scale-80.png", cAlternateFileName="EX9BE5~1.PNG")) returned 1
	[0067.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da5fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44e8
	[0067.205] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.205] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-white_scale-100.png", cAlternateFileName="EXC172~1.PNG")) returned 1
	[0067.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44ec
	[0067.205] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.206] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-white_scale-140.png", cAlternateFileName="EXCELL~3.PNG")) returned 1
	[0067.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44f0
	[0067.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.207] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe43, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-white_scale-180.png", cAlternateFileName="EX529E~1.PNG")) returned 1
	[0067.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db0410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44f4
	[0067.207] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.207] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.contrast-white_scale-80.png", cAlternateFileName="EXCELL~1.PNG")) returned 1
	[0067.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db3ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44f8
	[0067.208] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.208] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x929, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.scale-100.png", cAlternateFileName="EXCELL~4.PNG")) returned 1
	[0067.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db71b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44fc
	[0067.209] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.209] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.scale-140.png", cAlternateFileName="EXCELL~2.PNG")) returned 1
	[0067.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dba880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4500
	[0067.210] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.210] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.scale-180.png", cAlternateFileName="EX5FD7~1.PNG")) returned 1
	[0067.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dbdf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4504
	[0067.211] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.211] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogo.scale-80.png", cAlternateFileName="EXDA38~1.PNG")) returned 1
	[0067.211] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc1620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4508
	[0067.212] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.212] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-black_scale-100.png", cAlternateFileName="EX71FE~1.PNG")) returned 1
	[0067.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc4cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x450c
	[0067.212] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-black_scale-140.png", cAlternateFileName="EXCE73~1.PNG")) returned 1
	[0067.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc83c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4510
	[0067.213] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.214] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-black_scale-180.png", cAlternateFileName="EX8CA4~1.PNG")) returned 1
	[0067.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcba90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4514
	[0067.214] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.215] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-black_scale-80.png", cAlternateFileName="EX98BE~1.PNG")) returned 1
	[0067.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dcf160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4518
	[0067.215] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.216] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x725, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-white_scale-100.png", cAlternateFileName="EX82AE~1.PNG")) returned 1
	[0067.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd2830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x451c
	[0067.216] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.217] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-white_scale-140.png", cAlternateFileName="EXB07C~1.PNG")) returned 1
	[0067.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd5f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4520
	[0067.218] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.218] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-white_scale-180.png", cAlternateFileName="EX0EF0~1.PNG")) returned 1
	[0067.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dd95d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4524
	[0067.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.219] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.contrast-white_scale-80.png", cAlternateFileName="EX8CE6~1.PNG")) returned 1
	[0067.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ddcca0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4528
	[0067.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.220] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.scale-100.png", cAlternateFileName="EX3CF4~1.PNG")) returned 1
	[0067.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de0370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x452c
	[0067.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.221] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x870, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.scale-140.png", cAlternateFileName="EX3590~1.PNG")) returned 1
	[0067.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de3a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4530
	[0067.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.223] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.scale-180.png", cAlternateFileName="EXE70C~1.PNG")) returned 1
	[0067.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2de7110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4534
	[0067.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.761] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExcelLogoSmall.scale-80.png", cAlternateFileName="EX97E8~1.PNG")) returned 1
	[0067.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4538
	[0067.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.765] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-black_scale-100.png", cAlternateFileName="FIRSTR~4.PNG")) returned 1
	[0067.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x453c
	[0067.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.766] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-black_scale-140.png", cAlternateFileName="FIRSTR~3.PNG")) returned 1
	[0067.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4540
	[0067.766] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.766] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa81, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-black_scale-180.png", cAlternateFileName="FI9FD2~1.PNG")) returned 1
	[0067.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4544
	[0067.767] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.767] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-black_scale-80.png", cAlternateFileName="FI357C~1.PNG")) returned 1
	[0067.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4548
	[0067.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.768] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-white_scale-100.png", cAlternateFileName="FIRSTR~2.PNG")) returned 1
	[0067.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x454c
	[0067.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.768] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-white_scale-140.png", cAlternateFileName="FIRSTR~1.PNG")) returned 1
	[0067.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4550
	[0067.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.769] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-white_scale-180.png", cAlternateFileName="FI8E23~1.PNG")) returned 1
	[0067.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4554
	[0067.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.770] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.contrast-white_scale-80.png", cAlternateFileName="FI4144~1.PNG")) returned 1
	[0067.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4558
	[0067.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.771] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.scale-100.png", cAlternateFileName="FI1EC9~1.PNG")) returned 1
	[0067.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x455c
	[0067.771] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.771] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.scale-140.png", cAlternateFileName="FIBF57~1.PNG")) returned 1
	[0067.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4560
	[0067.772] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.772] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.scale-180.png", cAlternateFileName="FI9277~1.PNG")) returned 1
	[0067.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4564
	[0067.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.773] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x649, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogo.scale-80.png", cAlternateFileName="FI8090~1.PNG")) returned 1
	[0067.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4568
	[0067.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.773] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-black_scale-100.png", cAlternateFileName="FI5507~1.PNG")) returned 1
	[0067.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x456c
	[0067.774] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.774] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-black_scale-140.png", cAlternateFileName="FI782A~1.PNG")) returned 1
	[0067.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4570
	[0067.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.775] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-black_scale-180.png", cAlternateFileName="FID9A4~1.PNG")) returned 1
	[0067.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4574
	[0067.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.776] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x552, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-black_scale-80.png", cAlternateFileName="FI5606~1.PNG")) returned 1
	[0067.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4578
	[0067.776] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.776] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-white_scale-100.png", cAlternateFileName="FID3BA~1.PNG")) returned 1
	[0067.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x457c
	[0067.777] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.777] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-white_scale-140.png", cAlternateFileName="FI1689~1.PNG")) returned 1
	[0067.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4580
	[0067.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.778] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-white_scale-180.png", cAlternateFileName="FIB7A7~1.PNG")) returned 1
	[0067.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4584
	[0067.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.779] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.contrast-white_scale-80.png", cAlternateFileName="FI5C4C~1.PNG")) returned 1
	[0067.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4588
	[0067.779] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.779] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.scale-100.png", cAlternateFileName="FI2DF7~1.PNG")) returned 1
	[0067.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x458c
	[0067.780] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.780] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.scale-140.png", cAlternateFileName="FIFE2A~1.PNG")) returned 1
	[0067.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4590
	[0067.781] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.781] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.scale-180.png", cAlternateFileName="FIA1A5~1.PNG")) returned 1
	[0067.784] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4594
	[0067.785] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.785] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FirstRunLogoSmall.scale-80.png", cAlternateFileName="FIED60~1.PNG")) returned 1
	[0067.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4598
	[0067.786] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.786] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-black_scale-100.png", cAlternateFileName="GROOVE~1.PNG")) returned 1
	[0067.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x459c
	[0067.787] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.787] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-black_scale-140.png", cAlternateFileName="GROOVE~2.PNG")) returned 1
	[0067.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45a0
	[0067.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.788] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-black_scale-180.png", cAlternateFileName="GRA3AD~1.PNG")) returned 1
	[0067.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45a4
	[0067.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.789] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x768, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-black_scale-80.png", cAlternateFileName="GR0C5F~1.PNG")) returned 1
	[0067.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45a8
	[0067.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.790] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-white_scale-100.png", cAlternateFileName="GRADA3~1.PNG")) returned 1
	[0067.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45ac
	[0067.790] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.791] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc16, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-white_scale-140.png", cAlternateFileName="GR7FD5~1.PNG")) returned 1
	[0067.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45b0
	[0067.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.792] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-white_scale-180.png", cAlternateFileName="GR2251~1.PNG")) returned 1
	[0067.792] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.792] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45b4
	[0067.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.contrast-white_scale-80.png", cAlternateFileName="GROOVE~3.PNG")) returned 1
	[0067.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45b8
	[0067.793] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.793] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe5e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.scale-100.png", cAlternateFileName="GR37CD~1.PNG")) returned 1
	[0067.793] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45bc
	[0067.794] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.794] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.scale-140.png", cAlternateFileName="GR3AC7~1.PNG")) returned 1
	[0067.794] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c0
	[0067.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.795] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1add, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.scale-180.png", cAlternateFileName="GR7C96~1.PNG")) returned 1
	[0067.795] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c4
	[0067.795] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.795] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogo.scale-80.png", cAlternateFileName="GROOVE~4.PNG")) returned 1
	[0067.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c8
	[0067.796] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.796] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-black_scale-100.png", cAlternateFileName="GRF89D~1.PNG")) returned 1
	[0067.796] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.796] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45cc
	[0067.797] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.797] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-black_scale-140.png", cAlternateFileName="GR4622~1.PNG")) returned 1
	[0067.797] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.797] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45d0
	[0067.797] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.798] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-black_scale-180.png", cAlternateFileName="GRBAC6~1.PNG")) returned 1
	[0067.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45d4
	[0067.798] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.799] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-black_scale-80.png", cAlternateFileName="GR3641~1.PNG")) returned 1
	[0067.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45d8
	[0067.799] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.799] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-white_scale-100.png", cAlternateFileName="GR7AE9~1.PNG")) returned 1
	[0067.799] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45dc
	[0067.800] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.800] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-white_scale-140.png", cAlternateFileName="GRF6AB~1.PNG")) returned 1
	[0067.800] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45e0
	[0067.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.801] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-white_scale-180.png", cAlternateFileName="GRC8DD~1.PNG")) returned 1
	[0067.801] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.801] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45e4
	[0067.801] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.900] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.contrast-white_scale-80.png", cAlternateFileName="GRE586~1.PNG")) returned 1
	[0067.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45e8
	[0067.901] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.901] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.scale-100.png", cAlternateFileName="GREDEF~1.PNG")) returned 1
	[0067.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45ec
	[0067.901] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.902] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.scale-140.png", cAlternateFileName="GR1CBD~1.PNG")) returned 1
	[0067.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45f0
	[0067.902] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.903] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.scale-180.png", cAlternateFileName="GR6942~1.PNG")) returned 1
	[0067.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45f4
	[0067.908] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.908] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GrooveLogoSmall.scale-80.png", cAlternateFileName="GR3369~1.PNG")) returned 1
	[0067.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45f8
	[0067.909] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.909] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-black_scale-100.png", cAlternateFileName="MS0237~1.PNG")) returned 1
	[0067.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45fc
	[0067.910] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.910] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-black_scale-140.png", cAlternateFileName="MS6F5E~1.PNG")) returned 1
	[0067.910] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4600
	[0067.911] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.911] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-black_scale-180.png", cAlternateFileName="MSA13D~1.PNG")) returned 1
	[0067.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4604
	[0067.912] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.912] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-black_scale-80.png", cAlternateFileName="MSACCE~1.PNG")) returned 1
	[0067.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4608
	[0067.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.913] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-white_scale-100.png", cAlternateFileName="MS13E6~1.PNG")) returned 1
	[0067.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x460c
	[0067.914] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.914] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xebc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-white_scale-140.png", cAlternateFileName="MSACCE~4.PNG")) returned 1
	[0067.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4610
	[0067.915] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.915] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-white_scale-180.png", cAlternateFileName="MSACCE~3.PNG")) returned 1
	[0067.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4614
	[0067.916] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.916] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.contrast-white_scale-80.png", cAlternateFileName="MSACCE~2.PNG")) returned 1
	[0067.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4618
	[0067.916] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.917] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc35, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.scale-100.png", cAlternateFileName="MS31C8~1.PNG")) returned 1
	[0067.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x461c
	[0067.917] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.918] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.scale-140.png", cAlternateFileName="MS30DC~1.PNG")) returned 1
	[0067.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4620
	[0067.918] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.919] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.scale-180.png", cAlternateFileName="MS72AB~1.PNG")) returned 1
	[0067.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4624
	[0067.919] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.919] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogo.scale-80.png", cAlternateFileName="MS2629~1.PNG")) returned 1
	[0067.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4628
	[0067.920] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.920] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MS631D~1.PNG")) returned 1
	[0067.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x462c
	[0067.921] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.921] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS214E~1.PNG")) returned 1
	[0067.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4630
	[0067.922] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.922] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MS7EC2~1.PNG")) returned 1
	[0067.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4634
	[0067.923] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.923] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MS389C~1.PNG")) returned 1
	[0067.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4638
	[0067.924] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.924] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS74CC~1.PNG")) returned 1
	[0067.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x463c
	[0067.925] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.925] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA29A~1.PNG")) returned 1
	[0067.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4640
	[0067.926] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.926] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSFF1F~1.PNG")) returned 1
	[0067.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4644
	[0067.928] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.928] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MSE33B~1.PNG")) returned 1
	[0067.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4648
	[0067.929] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.929] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.scale-100.png", cAlternateFileName="MSBF6D~1.PNG")) returned 1
	[0067.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464c
	[0067.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.930] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.scale-140.png", cAlternateFileName="MS1EB3~1.PNG")) returned 1
	[0067.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4650
	[0067.936] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.936] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.scale-180.png", cAlternateFileName="MSDBE4~1.PNG")) returned 1
	[0067.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4654
	[0067.937] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.937] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsAccessLogoSmall.scale-80.png", cAlternateFileName="MSF5B2~1.PNG")) returned 1
	[0067.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4658
	[0067.938] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.938] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-black_scale-100.png", cAlternateFileName="MSPUBL~4.PNG")) returned 1
	[0067.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x465c
	[0067.939] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.939] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-black_scale-140.png", cAlternateFileName="MSPUBL~3.PNG")) returned 1
	[0067.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4660
	[0067.940] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.940] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd19, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-black_scale-180.png", cAlternateFileName="MSPUBL~2.PNG")) returned 1
	[0067.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4664
	[0067.941] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.941] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-black_scale-80.png", cAlternateFileName="MSPUBL~1.PNG")) returned 1
	[0067.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0067.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4668
	[0067.942] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0067.942] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-white_scale-100.png", cAlternateFileName="MSF61D~1.PNG")) returned 1
	[0067.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x466c
	[0068.009] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.010] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-white_scale-140.png", cAlternateFileName="MS39EB~1.PNG")) returned 1
	[0068.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4670
	[0068.016] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.016] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-white_scale-180.png", cAlternateFileName="MSEB57~1.PNG")) returned 1
	[0068.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4674
	[0068.017] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.018] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.contrast-white_scale-80.png", cAlternateFileName="MS7453~1.PNG")) returned 1
	[0068.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4678
	[0068.018] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.019] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.scale-100.png", cAlternateFileName="MSAA06~1.PNG")) returned 1
	[0068.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x467c
	[0068.019] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.020] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.scale-140.png", cAlternateFileName="MSD8D3~1.PNG")) returned 1
	[0068.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4680
	[0068.022] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.022] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.scale-180.png", cAlternateFileName="MS2668~1.PNG")) returned 1
	[0068.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4684
	[0068.023] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.023] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogo.scale-80.png", cAlternateFileName="MS75BF~1.PNG")) returned 1
	[0068.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4688
	[0068.024] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.024] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MSD973~1.PNG")) returned 1
	[0068.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x468c
	[0068.024] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.025] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS97A4~1.PNG")) returned 1
	[0068.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4690
	[0068.025] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.026] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MSE439~1.PNG")) returned 1
	[0068.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4694
	[0068.026] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.027] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x637, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MSE1AD~1.PNG")) returned 1
	[0068.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4698
	[0068.027] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.028] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x717, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS5BCF~1.PNG")) returned 1
	[0068.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x469c
	[0068.028] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.029] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA854~1.PNG")) returned 1
	[0068.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46a0
	[0068.029] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.030] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSD622~1.PNG")) returned 1
	[0068.030] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46a4
	[0068.030] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.031] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MS6539~1.PNG")) returned 1
	[0068.031] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46a8
	[0068.031] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.scale-100.png", cAlternateFileName="MSA9CC~1.PNG")) returned 1
	[0068.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46ac
	[0068.032] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.scale-140.png", cAlternateFileName="MSD79A~1.PNG")) returned 1
	[0068.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46b0
	[0068.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.scale-180.png", cAlternateFileName="MS99FA~1.PNG")) returned 1
	[0068.039] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46b4
	[0068.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MsPubLogoSmall.scale-80.png", cAlternateFileName="MSC667~1.PNG")) returned 1
	[0068.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46b8
	[0068.040] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-black_scale-100.png", cAlternateFileName="ONAFA7~1.PNG")) returned 1
	[0068.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46bc
	[0068.041] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.041] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-black_scale-140.png", cAlternateFileName="ON5141~1.PNG")) returned 1
	[0068.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c0
	[0068.042] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-black_scale-180.png", cAlternateFileName="ON04BC~1.PNG")) returned 1
	[0068.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c4
	[0068.042] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-black_scale-80.png", cAlternateFileName="ONBA8A~1.PNG")) returned 1
	[0068.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c8
	[0068.043] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.043] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x896, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-white_scale-100.png", cAlternateFileName="ON2104~1.PNG")) returned 1
	[0068.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46cc
	[0068.044] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-white_scale-140.png", cAlternateFileName="ONENOT~1.PNG")) returned 1
	[0068.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46d0
	[0068.044] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-white_scale-180.png", cAlternateFileName="ON8260~1.PNG")) returned 1
	[0068.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46d4
	[0068.045] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.contrast-white_scale-80.png", cAlternateFileName="ONENOT~4.PNG")) returned 1
	[0068.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46d8
	[0068.046] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.046] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8db, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.scale-100.png", cAlternateFileName="ONENOT~3.PNG")) returned 1
	[0068.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46dc
	[0068.047] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.scale-140.png", cAlternateFileName="ONENOT~2.PNG")) returned 1
	[0068.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46e0
	[0068.048] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd46, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.scale-180.png", cAlternateFileName="ON52BA~1.PNG")) returned 1
	[0068.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46e4
	[0068.048] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.049] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogo.scale-80.png", cAlternateFileName="ONF020~1.PNG")) returned 1
	[0068.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46e8
	[0068.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.049] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-black_scale-100.png", cAlternateFileName="ON193B~1.PNG")) returned 1
	[0068.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46ec
	[0068.050] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.050] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-black_scale-140.png", cAlternateFileName="ON585A~1.PNG")) returned 1
	[0068.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46f0
	[0068.051] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.051] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-black_scale-180.png", cAlternateFileName="ON9A29~1.PNG")) returned 1
	[0068.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46f4
	[0068.051] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.123] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-black_scale-80.png", cAlternateFileName="ON3426~1.PNG")) returned 1
	[0068.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46f8
	[0068.124] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.124] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-white_scale-100.png", cAlternateFileName="ON2492~1.PNG")) returned 1
	[0068.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46fc
	[0068.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.125] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OND60E~1.PNG")) returned 1
	[0068.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4700
	[0068.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.126] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-white_scale-180.png", cAlternateFileName="ON19DC~1.PNG")) returned 1
	[0068.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4704
	[0068.126] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.126] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.contrast-white_scale-80.png", cAlternateFileName="ONB09A~1.PNG")) returned 1
	[0068.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4708
	[0068.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.127] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x782, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.scale-100.png", cAlternateFileName="ON8AF0~1.PNG")) returned 1
	[0068.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x470c
	[0068.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.128] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.scale-140.png", cAlternateFileName="ON4822~1.PNG")) returned 1
	[0068.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4710
	[0068.133] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.133] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.scale-180.png", cAlternateFileName="ON95B6~1.PNG")) returned 1
	[0068.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4714
	[0068.133] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.134] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNoteLogoSmall.scale-80.png", cAlternateFileName="ON8B9B~1.PNG")) returned 1
	[0068.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4718
	[0068.134] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.134] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-black_scale-100.png", cAlternateFileName="OU5D17~1.PNG")) returned 1
	[0068.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x471c
	[0068.135] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.135] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-black_scale-140.png", cAlternateFileName="OUTLOO~1.PNG")) returned 1
	[0068.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4720
	[0068.136] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.136] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-black_scale-180.png", cAlternateFileName="OU4261~1.PNG")) returned 1
	[0068.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4724
	[0068.136] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.137] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-black_scale-80.png", cAlternateFileName="OUTLOO~4.PNG")) returned 1
	[0068.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4728
	[0068.137] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.137] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-white_scale-100.png", cAlternateFileName="OUTLOO~3.PNG")) returned 1
	[0068.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x472c
	[0068.138] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.138] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-white_scale-140.png", cAlternateFileName="OUTLOO~2.PNG")) returned 1
	[0068.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4730
	[0068.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.139] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-white_scale-180.png", cAlternateFileName="OUC015~1.PNG")) returned 1
	[0068.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4734
	[0068.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.139] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b250ebf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b250ebf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.contrast-white_scale-80.png", cAlternateFileName="OU197C~1.PNG")) returned 1
	[0068.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4738
	[0068.140] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.140] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa86, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.scale-100.png", cAlternateFileName="OUBE28~1.PNG")) returned 1
	[0068.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x473c
	[0068.141] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.141] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.scale-140.png", cAlternateFileName="OU7C59~1.PNG")) returned 1
	[0068.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4740
	[0068.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.142] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1155, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.scale-180.png", cAlternateFileName="OUC9ED~1.PNG")) returned 1
	[0068.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4744
	[0068.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.142] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogo.scale-80.png", cAlternateFileName="OU52E3~1.PNG")) returned 1
	[0068.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4748
	[0068.143] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.143] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-black_scale-100.png", cAlternateFileName="OU0B90~1.PNG")) returned 1
	[0068.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474c
	[0068.146] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.147] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-black_scale-140.png", cAlternateFileName="OU396E~1.PNG")) returned 1
	[0068.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4750
	[0068.147] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-black_scale-180.png", cAlternateFileName="OU86F2~1.PNG")) returned 1
	[0068.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4754
	[0068.148] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-black_scale-80.png", cAlternateFileName="OU0B51~1.PNG")) returned 1
	[0068.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4758
	[0068.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.149] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-white_scale-100.png", cAlternateFileName="OUFC89~1.PNG")) returned 1
	[0068.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x475c
	[0068.150] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OU4A1E~1.PNG")) returned 1
	[0068.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4760
	[0068.150] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-white_scale-180.png", cAlternateFileName="OU78EB~1.PNG")) returned 1
	[0068.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4764
	[0068.151] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.contrast-white_scale-80.png", cAlternateFileName="OU8EEC~1.PNG")) returned 1
	[0068.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4768
	[0068.152] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.scale-100.png", cAlternateFileName="OU6135~1.PNG")) returned 1
	[0068.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x476c
	[0068.153] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.153] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.scale-140.png", cAlternateFileName="OU6CFB~1.PNG")) returned 1
	[0068.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4770
	[0068.157] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.157] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a74a04e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.scale-180.png", cAlternateFileName="OU2A2D~1.PNG")) returned 1
	[0068.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4774
	[0068.158] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.158] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x744, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OutlookLogoSmall.scale-80.png", cAlternateFileName="OU72E3~1.PNG")) returned 1
	[0068.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4778
	[0068.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.159] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-black_scale-100.png", cAlternateFileName="POWERP~3.PNG")) returned 1
	[0068.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x477c
	[0068.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.160] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb02, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-black_scale-140.png", cAlternateFileName="POWERP~1.PNG")) returned 1
	[0068.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4780
	[0068.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.160] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-black_scale-180.png", cAlternateFileName="POA3C2~1.PNG")) returned 1
	[0068.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4784
	[0068.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.193] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7bd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-black_scale-80.png", cAlternateFileName="POB7FC~1.PNG")) returned 1
	[0068.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4788
	[0068.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.194] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-white_scale-100.png", cAlternateFileName="PO3D2C~1.PNG")) returned 1
	[0068.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x478c
	[0068.195] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.195] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-white_scale-140.png", cAlternateFileName="PO7FFA~1.PNG")) returned 1
	[0068.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4790
	[0068.196] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.196] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-white_scale-180.png", cAlternateFileName="PO2276~1.PNG")) returned 1
	[0068.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4794
	[0068.197] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.197] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.contrast-white_scale-80.png", cAlternateFileName="POWERP~2.PNG")) returned 1
	[0068.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4798
	[0068.198] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x915, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.scale-100.png", cAlternateFileName="PO6386~1.PNG")) returned 1
	[0068.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x479c
	[0068.199] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.199] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.scale-140.png", cAlternateFileName="POWERP~4.PNG")) returned 1
	[0068.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47a0
	[0068.200] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd87, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.scale-180.png", cAlternateFileName="PODF31~1.PNG")) returned 1
	[0068.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47a4
	[0068.201] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogo.scale-80.png", cAlternateFileName="PO0348~1.PNG")) returned 1
	[0068.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47a8
	[0068.202] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.202] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-black_scale-100.png", cAlternateFileName="PO798C~1.PNG")) returned 1
	[0068.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47ac
	[0068.203] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.203] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x802, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-black_scale-140.png", cAlternateFileName="PO54A4~1.PNG")) returned 1
	[0068.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47b0
	[0068.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.204] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-black_scale-180.png", cAlternateFileName="PO12D5~1.PNG")) returned 1
	[0068.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47b4
	[0068.205] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.205] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-black_scale-80.png", cAlternateFileName="PO605C~1.PNG")) returned 1
	[0068.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47b8
	[0068.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.206] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-white_scale-100.png", cAlternateFileName="POF730~1.PNG")) returned 1
	[0068.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47bc
	[0068.207] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.207] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-white_scale-140.png", cAlternateFileName="POD5F0~1.PNG")) returned 1
	[0068.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c0
	[0068.211] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.212] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-white_scale-180.png", cAlternateFileName="PO9322~1.PNG")) returned 1
	[0068.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c4
	[0068.213] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.contrast-white_scale-80.png", cAlternateFileName="POB2A2~1.PNG")) returned 1
	[0068.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c8
	[0068.214] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.214] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.scale-100.png", cAlternateFileName="PO420E~1.PNG")) returned 1
	[0068.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47cc
	[0068.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.219] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x853, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.scale-140.png", cAlternateFileName="PO003F~1.PNG")) returned 1
	[0068.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47d0
	[0068.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.220] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.scale-180.png", cAlternateFileName="PO5DB3~1.PNG")) returned 1
	[0068.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47d4
	[0068.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.221] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPntLogoSmall.scale-80.png", cAlternateFileName="PO2503~1.PNG")) returned 1
	[0068.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47d8
	[0068.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.222] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-black_scale-100.png", cAlternateFileName="VI0946~1.PNG")) returned 1
	[0068.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47dc
	[0068.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.224] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-black_scale-140.png", cAlternateFileName="VIC677~1.PNG")) returned 1
	[0068.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47e0
	[0068.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.225] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-black_scale-180.png", cAlternateFileName="VISIOL~3.PNG")) returned 1
	[0068.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47e4
	[0068.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.226] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-black_scale-80.png", cAlternateFileName="VISIOL~1.PNG")) returned 1
	[0068.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47e8
	[0068.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.227] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-white_scale-100.png", cAlternateFileName="VIFA3F~1.PNG")) returned 1
	[0068.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47ec
	[0068.228] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.228] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-white_scale-140.png", cAlternateFileName="VISIOL~2.PNG")) returned 1
	[0068.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47f0
	[0068.229] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.229] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-white_scale-180.png", cAlternateFileName="VISIOL~4.PNG")) returned 1
	[0068.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47f4
	[0068.230] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.230] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x847, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.contrast-white_scale-80.png", cAlternateFileName="VI1BD5~1.PNG")) returned 1
	[0068.230] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47f8
	[0068.231] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.scale-100.png", cAlternateFileName="VIA47A~1.PNG")) returned 1
	[0068.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47fc
	[0068.232] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.232] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe69, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.scale-140.png", cAlternateFileName="VIAD54~1.PNG")) returned 1
	[0068.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4804
	[0068.233] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.233] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.scale-180.png", cAlternateFileName="VI20DC~1.PNG")) returned 1
	[0068.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4808
	[0068.234] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.234] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogo.scale-80.png", cAlternateFileName="VI2F4A~1.PNG")) returned 1
	[0068.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x480c
	[0068.235] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x790, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-black_scale-100.png", cAlternateFileName="VI6631~1.PNG")) returned 1
	[0068.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4810
	[0068.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-black_scale-140.png", cAlternateFileName="VI2462~1.PNG")) returned 1
	[0068.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4814
	[0068.237] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-black_scale-180.png", cAlternateFileName="VI71F6~1.PNG")) returned 1
	[0068.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4818
	[0068.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.238] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-black_scale-80.png", cAlternateFileName="VI602A~1.PNG")) returned 1
	[0068.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x481c
	[0068.358] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.358] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-white_scale-100.png", cAlternateFileName="VI77E0~1.PNG")) returned 1
	[0068.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4820
	[0068.358] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.359] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-white_scale-140.png", cAlternateFileName="VI3512~1.PNG")) returned 1
	[0068.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4824
	[0068.359] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.359] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-white_scale-180.png", cAlternateFileName="VI82A6~1.PNG")) returned 1
	[0068.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4828
	[0068.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.360] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.contrast-white_scale-80.png", cAlternateFileName="VIEC8E~1.PNG")) returned 1
	[0068.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x482c
	[0068.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.361] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.scale-100.png", cAlternateFileName="VI400A~1.PNG")) returned 1
	[0068.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4830
	[0068.365] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.366] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.scale-140.png", cAlternateFileName="VIF275~1.PNG")) returned 1
	[0068.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4834
	[0068.366] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.366] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.scale-180.png", cAlternateFileName="VI3544~1.PNG")) returned 1
	[0068.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4838
	[0068.367] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.367] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VisioLogoSmall.scale-80.png", cAlternateFileName="VIA6C1~1.PNG")) returned 1
	[0068.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x483c
	[0068.367] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.368] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8eb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-black_scale-100.png", cAlternateFileName="WINPRO~3.PNG")) returned 1
	[0068.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4840
	[0068.368] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.368] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-black_scale-140.png", cAlternateFileName="WINPRO~1.PNG")) returned 1
	[0068.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4844
	[0068.369] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.369] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-black_scale-180.png", cAlternateFileName="WINPRO~2.PNG")) returned 1
	[0068.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4848
	[0068.370] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.370] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-black_scale-80.png", cAlternateFileName="WIE37A~1.PNG")) returned 1
	[0068.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484c
	[0068.371] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.371] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-white_scale-100.png", cAlternateFileName="WIA969~1.PNG")) returned 1
	[0068.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4850
	[0068.371] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.372] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-white_scale-140.png", cAlternateFileName="WID2E1~1.PNG")) returned 1
	[0068.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.372] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4854
	[0068.372] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.372] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-white_scale-180.png", cAlternateFileName="WI9EA3~1.PNG")) returned 1
	[0068.372] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4858
	[0068.373] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.373] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x836, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.contrast-white_scale-80.png", cAlternateFileName="WI385D~1.PNG")) returned 1
	[0068.373] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x485c
	[0068.374] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.374] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x935, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.scale-100.png", cAlternateFileName="WI7FD4~1.PNG")) returned 1
	[0068.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4860
	[0068.375] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.375] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.scale-140.png", cAlternateFileName="WI3D06~1.PNG")) returned 1
	[0068.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4864
	[0068.376] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.376] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.scale-180.png", cAlternateFileName="WI8A9A~1.PNG")) returned 1
	[0068.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4868
	[0068.377] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.377] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x890, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogo.scale-80.png", cAlternateFileName="WI01D8~1.PNG")) returned 1
	[0068.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x486c
	[0068.378] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.379] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x759, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI30FF~1.PNG")) returned 1
	[0068.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4870
	[0068.379] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.379] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WINPRO~4.PNG")) returned 1
	[0068.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4874
	[0068.380] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.380] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIE311~1.PNG")) returned 1
	[0068.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4878
	[0068.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.381] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIC0C5~1.PNG")) returned 1
	[0068.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x487c
	[0068.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.382] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIB14C~1.PNG")) returned 1
	[0068.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4880
	[0068.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.382] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x837, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WI0FC0~1.PNG")) returned 1
	[0068.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4884
	[0068.383] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.383] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WICCF1~1.PNG")) returned 1
	[0068.383] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4888
	[0068.384] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.384] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WICBAE~1.PNG")) returned 1
	[0068.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x488c
	[0068.384] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.385] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.scale-100.png", cAlternateFileName="WIC069~1.PNG")) returned 1
	[0068.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4890
	[0068.389] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.389] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x869, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.scale-140.png", cAlternateFileName="WIBBE1~1.PNG")) returned 1
	[0068.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4894
	[0068.389] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.390] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.scale-180.png", cAlternateFileName="WIB5A3~1.PNG")) returned 1
	[0068.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4898
	[0068.390] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.390] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x676, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinProjLogoSmall.scale-80.png", cAlternateFileName="WI3748~1.PNG")) returned 1
	[0068.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x489c
	[0068.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.391] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-black_scale-100.png", cAlternateFileName="WI8B9B~1.PNG")) returned 1
	[0068.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48a0
	[0068.393] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.393] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-black_scale-140.png", cAlternateFileName="WIE5F9~1.PNG")) returned 1
	[0068.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48a4
	[0068.394] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.394] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-black_scale-180.png", cAlternateFileName="WI28C8~1.PNG")) returned 1
	[0068.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48a8
	[0068.395] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.395] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-black_scale-80.png", cAlternateFileName="WI813E~1.PNG")) returned 1
	[0068.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48ac
	[0068.396] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.396] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-white_scale-100.png", cAlternateFileName="WINWOR~4.PNG")) returned 1
	[0068.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.396] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48b0
	[0068.397] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.397] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-white_scale-140.png", cAlternateFileName="WID44A~1.PNG")) returned 1
	[0068.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48b4
	[0068.397] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.398] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-white_scale-180.png", cAlternateFileName="WINWOR~1.PNG")) returned 1
	[0068.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48b8
	[0068.398] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.398] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.contrast-white_scale-80.png", cAlternateFileName="WINWOR~3.PNG")) returned 1
	[0068.398] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48bc
	[0068.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.399] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.scale-100.png", cAlternateFileName="WIEE7A~1.PNG")) returned 1
	[0068.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c0
	[0068.400] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.400] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.scale-140.png", cAlternateFileName="WINWOR~2.PNG")) returned 1
	[0068.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c4
	[0068.400] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.401] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.scale-180.png", cAlternateFileName="WIACD7~1.PNG")) returned 1
	[0068.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c8
	[0068.401] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.401] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogo.scale-80.png", cAlternateFileName="WI8265~1.PNG")) returned 1
	[0068.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48cc
	[0068.402] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.402] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI2520~1.PNG")) returned 1
	[0068.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48d0
	[0068.403] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.403] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WIA801~1.PNG")) returned 1
	[0068.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48d4
	[0068.404] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.404] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIF595~1.PNG")) returned 1
	[0068.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48d8
	[0068.405] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.405] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIB9E7~1.PNG")) returned 1
	[0068.405] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48dc
	[0068.406] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.406] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x781, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIA3D3~1.PNG")) returned 1
	[0068.406] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48e0
	[0068.406] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.407] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af55fee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WIB9B0~1.PNG")) returned 1
	[0068.407] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.407] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48e4
	[0068.407] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.460] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WIE78E~1.PNG")) returned 1
	[0068.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.461] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48f0
	[0068.461] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.461] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0d373e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0d373e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WI62EF~1.PNG")) returned 1
	[0068.461] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48f4
	[0068.462] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.462] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.scale-100.png", cAlternateFileName="WI3A30~1.PNG")) returned 1
	[0068.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48f8
	[0068.464] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.464] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b27715c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b29d36d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.scale-140.png", cAlternateFileName="WI93F0~1.PNG")) returned 1
	[0068.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.464] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48fc
	[0068.465] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.465] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b145e25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b145e25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b145e25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.scale-180.png", cAlternateFileName="WIE085~1.PNG")) returned 1
	[0068.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4900
	[0068.466] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.466] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8edb08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8edb08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a913cc8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.scale-80.png", cAlternateFileName="WIB162~1.PNG")) returned 1
	[0068.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4904
	[0068.467] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.467] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8edb08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8edb08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a913cc8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WinWordLogoSmall.scale-80.png", cAlternateFileName="WIB162~1.PNG")) returned 0
	[0068.467] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.468] SetLastError (dwErrCode=0x0) 
	[0068.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.471] GetLastError () returned 0x5
	[0068.471] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.471] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.471] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4d0d64, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979a48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lync.exe", cAlternateFileName="")) returned 1
	[0068.471] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcca238b3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcca238b3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xccd6abed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa94, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="LYNC.EXE.MANIFEST", cAlternateFileName="LYNCEX~1.MAN")) returned 1
	[0068.471] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286c9, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lync.ico", cAlternateFileName="")) returned 1
	[0068.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c0
	[0068.471] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.472] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a913cc8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x223d, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Lync2013_Third_Party_Notices.txt", cAlternateFileName="LYNC20~1.TXT")) returned 1
	[0068.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4908
	[0068.473] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb98a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lync99.exe", cAlternateFileName="")) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcca238b3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcca238b3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdee341d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23fd640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="LyncDesktopSmartBitmapResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcca238b3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xde77f7db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdec6a56c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x103d248, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lyncDesktopViewModel.dll", cAlternateFileName="LYNCDE~2.DLL")) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9884bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb73240, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lynchtmlconv.exe", cAlternateFileName="LYNCHT~1.EXE")) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcce034a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcce034a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcce034a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lynchtmlconvpxy.dll", cAlternateFileName="LYNCHT~1.DLL")) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcce034a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xde9231af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdec90856, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x204ea8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="lyncModelProxy.dll", cAlternateFileName="LYNCMO~1.DLL")) returned 1
	[0068.473] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MANIFEST.XML", cAlternateFileName="")) returned 1
	[0068.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x490c
	[0068.474] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.474] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73880, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MAPIPH.DLL", cAlternateFileName="")) returned 1
	[0068.474] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x124b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MAPISHELL.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1
	[0068.474] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a939f30, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1668, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mce.dll", cAlternateFileName="")) returned 1
	[0068.474] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a939f30, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4854, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="McePerfCtr.man", cAlternateFileName="MCEPER~1.MAN")) returned 1
	[0068.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4910
	[0068.475] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.475] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Media", cAlternateFileName="")) returned 1
	[0068.475] SetLastError (dwErrCode=0x0) 
	[0068.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.475] GetLastError () returned 0x5
	[0068.475] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.475] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.475] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0068.478] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.479] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a913cc8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a913cc8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a939f30, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6daa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPLAUSE.WAV", cAlternateFileName="")) returned 1
	[0068.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4918
	[0068.479] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.480] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8edb08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8edb08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a939f30, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARROW.WAV", cAlternateFileName="")) returned 1
	[0068.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x491c
	[0068.480] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.480] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8edb08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8edb08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a913cc8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f676, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOMB.WAV", cAlternateFileName="")) returned 1
	[0068.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4920
	[0068.481] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.481] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0d373e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0d373e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BREEZE.WAV", cAlternateFileName="")) returned 1
	[0068.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4924
	[0068.482] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.482] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1594, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAMERA.WAV", cAlternateFileName="")) returned 1
	[0068.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4928
	[0068.483] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.483] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d7f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CASHREG.WAV", cAlternateFileName="")) returned 1
	[0068.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x492c
	[0068.484] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.484] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af55fee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHIMES.WAV", cAlternateFileName="")) returned 1
	[0068.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4930
	[0068.484] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.485] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a960163, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a960163, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CLICK.WAV", cAlternateFileName="")) returned 1
	[0068.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4934
	[0068.485] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.485] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a939f30, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a939f30, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a960163, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COIN.WAV", cAlternateFileName="")) returned 1
	[0068.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4938
	[0068.486] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.486] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a939f30, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a939f30, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af55fee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe669, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DefaultHold.wma", cAlternateFileName="DEFAUL~1.WMA")) returned 1
	[0068.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x493c
	[0068.487] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.487] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1afa24f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4be2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRUMROLL.WAV", cAlternateFileName="")) returned 1
	[0068.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4940
	[0068.487] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.488] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1afa24f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPLODE.WAV", cAlternateFileName="")) returned 1
	[0068.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4944
	[0068.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.488] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1afa24f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfbc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HAMMER.WAV", cAlternateFileName="")) returned 1
	[0068.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4948
	[0068.489] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.489] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LASER.WAV", cAlternateFileName="")) returned 1
	[0068.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x494c
	[0068.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.490] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17c7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_abbrdialtone.wav", cAlternateFileName="LYNC_A~3.WAV")) returned 1
	[0068.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4950
	[0068.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.491] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ActivePresenterChange.wav", cAlternateFileName="LYNC_A~1.WAV")) returned 1
	[0068.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4954
	[0068.491] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.492] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_appinvite.wav", cAlternateFileName="LYNC_A~2.WAV")) returned 1
	[0068.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4958
	[0068.493] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.494] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_busy.wav", cAlternateFileName="LYNC_B~1.WAV")) returned 1
	[0068.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x495c
	[0068.494] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.494] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x275a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_callended.wav", cAlternateFileName="LYNC_C~1.WAV")) returned 1
	[0068.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4960
	[0068.495] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.495] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b03add6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b03add6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ChangeModality.wav", cAlternateFileName="LYNC_C~3.WAV")) returned 1
	[0068.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4964
	[0068.496] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.496] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b03add6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b03add6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2db6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_connecting.wav", cAlternateFileName="LYNC_C~2.WAV")) returned 1
	[0068.496] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4968
	[0068.496] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.497] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b03add6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b03add6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8226, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dialtone.wav", cAlternateFileName="LY3254~1.WAV")) returned 1
	[0068.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x496c
	[0068.497] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.497] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1afa24f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1afa24f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b03add6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2588, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf0.wav", cAlternateFileName="LYD4E7~1.WAV")) returned 1
	[0068.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4970
	[0068.498] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.498] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1afa24f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1afa24f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b03add6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2530, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf1.wav", cAlternateFileName="LY1F07~1.WAV")) returned 1
	[0068.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4974
	[0068.499] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.499] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1afa24f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x259c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf2.wav", cAlternateFileName="LYNC_D~1.WAV")) returned 1
	[0068.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4978
	[0068.499] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.500] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1afa24f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1afa24f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b03add6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf3.wav", cAlternateFileName="LY55E7~1.WAV")) returned 1
	[0068.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.500] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x497c
	[0068.500] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.500] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1afa24f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1afa24f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b03add6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25b4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf4.wav", cAlternateFileName="LYNC_D~4.WAV")) returned 1
	[0068.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4980
	[0068.501] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.501] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1afa24f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1afa24f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1afc86d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf5.wav", cAlternateFileName="LYNC_D~3.WAV")) returned 1
	[0068.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4984
	[0068.502] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.502] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af7c22b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af7c22b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b03add6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf6.wav", cAlternateFileName="LYNC_D~2.WAV")) returned 1
	[0068.502] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4988
	[0068.502] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.502] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b06103b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b06103b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0ad4d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2578, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf7.wav", cAlternateFileName="LYFFE8~1.WAV")) returned 1
	[0068.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.503] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498c
	[0068.503] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.503] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b06103b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b06103b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0ad4d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf8.wav", cAlternateFileName="LYD480~1.WAV")) returned 1
	[0068.503] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.504] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4990
	[0068.504] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.504] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b06103b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b06103b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0ad4d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmf9.wav", cAlternateFileName="LY9A51~1.WAV")) returned 1
	[0068.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4994
	[0068.581] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.581] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b06103b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b06103b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmfpound.wav", cAlternateFileName="LY0309~1.WAV")) returned 1
	[0068.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4998
	[0068.582] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.582] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b06103b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b06103b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_dtmfstar.wav", cAlternateFileName="LYF790~1.WAV")) returned 1
	[0068.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x499c
	[0068.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.583] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b03add6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b03add6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19c6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_fastbusy.wav", cAlternateFileName="LYNC_F~1.WAV")) returned 1
	[0068.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49a0
	[0068.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.583] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b03add6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b03add6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafcac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_fsringing.wav", cAlternateFileName="LYNC_F~2.WAV")) returned 1
	[0068.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49a4
	[0068.584] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.584] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b03add6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b03add6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b06103b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_howler.wav", cAlternateFileName="LYNC_H~1.WAV")) returned 1
	[0068.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49a8
	[0068.585] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.585] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0ad4d6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0ad4d6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0d373e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_iminvite.wav", cAlternateFileName="LYNC_I~1.WAV")) returned 1
	[0068.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49ac
	[0068.585] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.585] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0ad4d6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0ad4d6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0d373e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83bc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_joinedconference.wav", cAlternateFileName="LYNC_J~1.WAV")) returned 1
	[0068.586] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49b0
	[0068.587] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.587] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b06103b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b06103b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0ad4d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3586c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_muting.wav", cAlternateFileName="LYNC_M~1.WAV")) returned 1
	[0068.587] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.587] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49b4
	[0068.587] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.588] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0ad4d6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0ad4d6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0d373e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_newim.wav", cAlternateFileName="LYNC_N~1.WAV")) returned 1
	[0068.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49b8
	[0068.588] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.588] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b08728d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b08728d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6bec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_onhold.wav", cAlternateFileName="LYNC_O~1.WAV")) returned 1
	[0068.588] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49bc
	[0068.589] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.589] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c054, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_presence.wav", cAlternateFileName="LYNC_P~1.WAV")) returned 1
	[0068.589] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c0
	[0068.590] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.590] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0d373e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0d373e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0d373e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x539a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_redirect.wav", cAlternateFileName="LYNC_R~2.WAV")) returned 1
	[0068.590] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.590] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c4
	[0068.590] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.591] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0d373e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0d373e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0d373e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafcac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringback.wav", cAlternateFileName="LYNC_R~1.WAV")) returned 1
	[0068.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c8
	[0068.591] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.591] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b11fc05, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b11fc05, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b145e25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafcac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringing.wav", cAlternateFileName="LYNC_R~4.WAV")) returned 1
	[0068.591] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49cc
	[0068.592] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.592] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b16c081, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringtone2.wav", cAlternateFileName="LYNC_R~3.WAV")) returned 1
	[0068.592] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49d0
	[0068.592] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.593] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b145e25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b145e25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b145e25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5100, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringtone3.wav", cAlternateFileName="LYE797~1.WAV")) returned 1
	[0068.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49d4
	[0068.593] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.594] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b16c081, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b16c081, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b192318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringtone4.wav", cAlternateFileName="LY7D9C~1.WAV")) returned 1
	[0068.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49d8
	[0068.594] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.594] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b16c081, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b16c081, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1b855a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5e02c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringtone5.wav", cAlternateFileName="LY4D2F~1.WAV")) returned 1
	[0068.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49dc
	[0068.595] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.595] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b1b855a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b1b855a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1b855a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57220, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringtone6.wav", cAlternateFileName="LY1805~1.WAV")) returned 1
	[0068.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49e0
	[0068.595] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.596] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b192318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b192318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158830, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_ringtone7.wav", cAlternateFileName="LYA2C6~1.WAV")) returned 1
	[0068.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49e4
	[0068.596] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.596] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b1de7ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b1de7ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ad84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_secondcall.wav", cAlternateFileName="LYNC_S~1.WAV")) returned 1
	[0068.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49e8
	[0068.597] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.597] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b1de7ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b1de7ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3adc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_untag.wav", cAlternateFileName="LYNC_U~1.WAV")) returned 1
	[0068.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49ec
	[0068.598] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.598] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b1de7ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b1de7ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ee14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_videoadded.wav", cAlternateFileName="LYNC_V~2.WAV")) returned 1
	[0068.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49f0
	[0068.598] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.599] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b1b855a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b1b855a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafcac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LYNC_videocall.wav", cAlternateFileName="LYNC_V~1.WAV")) returned 1
	[0068.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49f4
	[0068.599] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.599] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b1b855a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b1b855a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b1b855a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PUSH.WAV", cAlternateFileName="")) returned 1
	[0068.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49f8
	[0068.600] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.600] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b22ac67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b22ac67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1664, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SUCTION.WAV", cAlternateFileName="")) returned 1
	[0068.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49fc
	[0068.601] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.601] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2049f6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b2049f6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TYPE.WAV", cAlternateFileName="")) returned 1
	[0068.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a00
	[0068.602] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.602] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2049f6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b2049f6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VOLTAGE.WAV", cAlternateFileName="")) returned 1
	[0068.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a04
	[0068.603] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.603] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2049f6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b2049f6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHOOSH.WAV", cAlternateFileName="")) returned 1
	[0068.603] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a08
	[0068.603] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.604] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2049f6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b2049f6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WIND.WAV", cAlternateFileName="")) returned 1
	[0068.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a0c
	[0068.604] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.604] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2049f6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b2049f6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WIND.WAV", cAlternateFileName="")) returned 0
	[0068.604] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0068.605] SetLastError (dwErrCode=0x0) 
	[0068.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.607] GetLastError () returned 0x5
	[0068.607] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.607] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.607] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1
	[0068.607] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9e08e14, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xda95c127, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0068.607] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152b4, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Microsoft.Lync.Model.zip", cAlternateFileName="MICROS~1.ZIP")) returned 1
	[0068.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4914
	[0068.608] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.608] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7072, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Microsoft.Lync.Utilities.Controls.zip", cAlternateFileName="MICROS~2.ZIP")) returned 1
	[0068.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a10
	[0068.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.609] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135c, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Microsoft.Lync.Utilities.zip", cAlternateFileName="MICROS~3.ZIP")) returned 1
	[0068.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a14
	[0068.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x417af59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x106e0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.Interop.Visio.WorkflowAuthoring.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a558, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.PolicyTips.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xa2c40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="microsoft.office.workflow.actions.proxy.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3f64de3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xafea8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="microsoft.sharepoint.workflowactions.proxy.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MIMEDIR.DLL", cAlternateFileName="")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MINSBPROXY.DLL", cAlternateFileName="MINSBP~1.DLL")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda6387a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MINSBROAMINGPROXY.DLL", cAlternateFileName="MINSBR~1.DLL")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="misc.exe", cAlternateFileName="")) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a6698c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14a68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MLCFG32.CPL", cAlternateFileName="")) returned 1
	[0068.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a18
	[0068.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.610] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda6387a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25f87, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MML2OMML.XSL", cAlternateFileName="")) returned 1
	[0068.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a1c
	[0068.611] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.611] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda6387a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x99678, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MORPH9.DLL", cAlternateFileName="")) returned 1
	[0068.611] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e71ae1, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x308a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MPXINT.DLL", cAlternateFileName="")) returned 1
	[0068.613] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceac5c2a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceac5c2a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe15188c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa7860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSACC.OLB", cAlternateFileName="")) returned 1
	[0068.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a20
	[0068.614] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.614] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf58154c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1708762, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13b5440, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSACCESS.EXE", cAlternateFileName="")) returned 1
	[0068.614] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb84720, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb84720, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd39e5e8b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8cc, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msaccess.exe.manifest", cAlternateFileName="MSACCE~1.MAN")) returned 1
	[0068.614] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xedc073c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xedc073c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSACCESS.VisualElementsManifest.xml", cAlternateFileName="MSACCE~1.XML")) returned 1
	[0068.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a24
	[0068.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.615] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16a68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSAEXP30.DLL", cAlternateFileName="")) returned 1
	[0068.615] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104d8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSBARCODE.DLL", cAlternateFileName="MSBARC~1.DLL")) returned 1
	[0068.615] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc522eecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc522eecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5255140, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7cm_en.dub", cAlternateFileName="MSCSS7~4.DUB")) returned 1
	[0068.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a28
	[0068.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.616] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc522eecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc522eecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5255140, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7cm_es.dub", cAlternateFileName="MS02C4~1.DUB")) returned 1
	[0068.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a2c
	[0068.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.617] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5196662, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5196662, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc51bc7d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7cm_fr.dub", cAlternateFileName="MSCSS7~2.DUB")) returned 1
	[0068.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a30
	[0068.618] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.618] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc522eecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc522eecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a8396f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7en.dll", cAlternateFileName="")) returned 1
	[0068.618] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4db6809, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97ecd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7es.dll", cAlternateFileName="")) returned 1
	[0068.618] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5196662, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5196662, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97ecd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7fr.dll", cAlternateFileName="")) returned 1
	[0068.618] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5018eb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5018eb8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a8396f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19600, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7wre_en.dub", cAlternateFileName="MSCSS7~1.DUB")) returned 1
	[0068.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a34
	[0068.619] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.619] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5255140, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5255140, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5255140, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7wre_es.dub", cAlternateFileName="MSB080~1.DUB")) returned 1
	[0068.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a38
	[0068.620] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.620] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc51bc7d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc51bc7d4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc51bc7d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mscss7wre_fr.dub", cAlternateFileName="MSCSS7~3.DUB")) returned 1
	[0068.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a3c
	[0068.621] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.621] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbf4f0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7.dll", cAlternateFileName="")) returned 1
	[0068.621] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c5000, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7db.kic", cAlternateFileName="")) returned 1
	[0068.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a40
	[0068.622] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.622] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5b3e, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7en.kic", cAlternateFileName="")) returned 1
	[0068.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a44
	[0068.622] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.623] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13e9f2, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7es.kic", cAlternateFileName="")) returned 1
	[0068.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a48
	[0068.623] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.623] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b440d69, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c1c, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7fr.kic", cAlternateFileName="")) returned 1
	[0068.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a4c
	[0068.624] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.624] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b335ccc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3567a6, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7ge.kic", cAlternateFileName="")) returned 1
	[0068.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a50
	[0068.625] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.625] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da59c, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7jp.kic", cAlternateFileName="")) returned 1
	[0068.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a54
	[0068.626] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.626] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b35bf1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76e68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7tk.dll", cAlternateFileName="")) returned 1
	[0068.626] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b35bf1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeda80, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mset7tkjp.dll", cAlternateFileName="MSET7T~1.DLL")) returned 1
	[0068.626] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b35bf1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fca8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msfad.dll", cAlternateFileName="")) returned 1
	[0068.626] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSIPC", cAlternateFileName="")) returned 1
	[0068.626] SetLastError (dwErrCode=0x0) 
	[0068.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.626] GetLastError () returned 0x5
	[0068.626] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.626] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.626] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc4f0
	[0068.627] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.627] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ar", cAlternateFileName="")) returned 1
	[0068.627] SetLastError (dwErrCode=0x0) 
	[0068.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.627] GetLastError () returned 0x5
	[0068.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.627] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0068.628] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.628] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.628] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.628] FindClose (in: hFindFile=0x274bd1fc010 | out: hFindFile=0x274bd1fc010) returned 1
	[0068.837] SetLastError (dwErrCode=0x0) 
	[0068.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ar\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.838] GetLastError () returned 0x5
	[0068.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.838] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.838] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="bg", cAlternateFileName="")) returned 1
	[0068.838] SetLastError (dwErrCode=0x0) 
	[0068.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.838] GetLastError () returned 0x5
	[0068.838] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.838] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.838] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.839] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.839] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.839] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.839] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.839] SetLastError (dwErrCode=0x0) 
	[0068.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\bg\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\bg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.839] GetLastError () returned 0x5
	[0068.839] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.840] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ca", cAlternateFileName="")) returned 1
	[0068.840] SetLastError (dwErrCode=0x0) 
	[0068.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.840] GetLastError () returned 0x5
	[0068.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.840] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.840] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.840] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.840] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.840] SetLastError (dwErrCode=0x0) 
	[0068.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ca\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ca\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.840] GetLastError () returned 0x5
	[0068.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.840] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="cs", cAlternateFileName="")) returned 1
	[0068.840] SetLastError (dwErrCode=0x0) 
	[0068.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.840] GetLastError () returned 0x5
	[0068.841] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.841] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.841] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.841] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.842] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.842] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.842] SetLastError (dwErrCode=0x0) 
	[0068.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\cs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.842] GetLastError () returned 0x5
	[0068.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.842] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.842] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="da", cAlternateFileName="")) returned 1
	[0068.842] SetLastError (dwErrCode=0x0) 
	[0068.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.842] GetLastError () returned 0x5
	[0068.842] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.842] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.842] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.842] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.842] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.842] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.842] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.842] SetLastError (dwErrCode=0x0) 
	[0068.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\da\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\da\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.843] GetLastError () returned 0x5
	[0068.843] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.843] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.843] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="de", cAlternateFileName="")) returned 1
	[0068.843] SetLastError (dwErrCode=0x0) 
	[0068.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.843] GetLastError () returned 0x5
	[0068.843] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.843] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0068.843] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.843] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.843] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.843] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0068.843] SetLastError (dwErrCode=0x0) 
	[0068.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\de\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\de\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.843] GetLastError () returned 0x5
	[0068.843] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.843] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.843] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="el", cAlternateFileName="")) returned 1
	[0068.843] SetLastError (dwErrCode=0x0) 
	[0068.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.844] GetLastError () returned 0x5
	[0068.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0068.844] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.844] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.844] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.844] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0068.844] SetLastError (dwErrCode=0x0) 
	[0068.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\el\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\el\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.844] GetLastError () returned 0x5
	[0068.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.844] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0068.844] SetLastError (dwErrCode=0x0) 
	[0068.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.844] GetLastError () returned 0x5
	[0068.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.845] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.845] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.845] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.845] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.845] SetLastError (dwErrCode=0x0) 
	[0068.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.845] GetLastError () returned 0x5
	[0068.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.845] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.845] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="es", cAlternateFileName="")) returned 1
	[0068.845] SetLastError (dwErrCode=0x0) 
	[0068.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.845] GetLastError () returned 0x5
	[0068.845] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.845] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.845] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.846] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.846] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.846] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.846] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.846] SetLastError (dwErrCode=0x0) 
	[0068.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\es\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\es\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.846] GetLastError () returned 0x5
	[0068.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.846] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.846] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="et", cAlternateFileName="")) returned 1
	[0068.846] SetLastError (dwErrCode=0x0) 
	[0068.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.846] GetLastError () returned 0x5
	[0068.846] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.846] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.847] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.847] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.847] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.847] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.847] SetLastError (dwErrCode=0x0) 
	[0068.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\et\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\et\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.847] GetLastError () returned 0x5
	[0068.847] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.847] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.848] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="eu", cAlternateFileName="")) returned 1
	[0068.848] SetLastError (dwErrCode=0x0) 
	[0068.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.848] GetLastError () returned 0x5
	[0068.848] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.848] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0068.848] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.848] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.848] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.848] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0068.848] SetLastError (dwErrCode=0x0) 
	[0068.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\eu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\eu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.848] GetLastError () returned 0x5
	[0068.848] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.848] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.848] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fi", cAlternateFileName="")) returned 1
	[0068.848] SetLastError (dwErrCode=0x0) 
	[0068.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.848] GetLastError () returned 0x5
	[0068.848] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.848] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.849] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.849] SetLastError (dwErrCode=0x0) 
	[0068.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.849] GetLastError () returned 0x5
	[0068.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.849] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="fr", cAlternateFileName="")) returned 1
	[0068.849] SetLastError (dwErrCode=0x0) 
	[0068.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.849] GetLastError () returned 0x5
	[0068.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.849] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.849] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.849] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0068.850] SetLastError (dwErrCode=0x0) 
	[0068.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\fr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\fr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.850] GetLastError () returned 0x5
	[0068.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.850] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.850] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="gl", cAlternateFileName="")) returned 1
	[0068.850] SetLastError (dwErrCode=0x0) 
	[0068.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.850] GetLastError () returned 0x5
	[0068.850] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.850] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.850] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.851] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.851] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2cf9c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.851] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2cf9c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.851] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.851] SetLastError (dwErrCode=0x0) 
	[0068.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\gl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\gl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.851] GetLastError () returned 0x5
	[0068.851] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.851] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.852] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="he", cAlternateFileName="")) returned 1
	[0068.852] SetLastError (dwErrCode=0x0) 
	[0068.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.852] GetLastError () returned 0x5
	[0068.852] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.852] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.852] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0068.852] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.852] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.852] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.853] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0068.853] SetLastError (dwErrCode=0x0) 
	[0068.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\he\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\he\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.853] GetLastError () returned 0x5
	[0068.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.853] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.853] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hi", cAlternateFileName="")) returned 1
	[0068.853] SetLastError (dwErrCode=0x0) 
	[0068.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.853] GetLastError () returned 0x5
	[0068.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.853] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.854] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.854] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.854] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.854] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.854] SetLastError (dwErrCode=0x0) 
	[0068.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.854] GetLastError () returned 0x5
	[0068.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.854] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.854] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hr", cAlternateFileName="")) returned 1
	[0068.854] SetLastError (dwErrCode=0x0) 
	[0068.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.854] GetLastError () returned 0x5
	[0068.854] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.854] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.855] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.855] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.855] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.855] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.855] SetLastError (dwErrCode=0x0) 
	[0068.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.855] GetLastError () returned 0x5
	[0068.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.855] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.855] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hu", cAlternateFileName="")) returned 1
	[0068.855] SetLastError (dwErrCode=0x0) 
	[0068.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.855] GetLastError () returned 0x5
	[0068.855] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.856] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.856] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.856] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.856] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.856] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.856] SetLastError (dwErrCode=0x0) 
	[0068.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\hu\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\hu\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.856] GetLastError () returned 0x5
	[0068.856] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.856] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.856] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="id", cAlternateFileName="")) returned 1
	[0068.856] SetLastError (dwErrCode=0x0) 
	[0068.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.856] GetLastError () returned 0x5
	[0068.856] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.856] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.856] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.856] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.857] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.857] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.857] SetLastError (dwErrCode=0x0) 
	[0068.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\id\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\id\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.857] GetLastError () returned 0x5
	[0068.857] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.857] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.857] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fcc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ipcsecproc.dll", cAlternateFileName="IPCSEC~1.DLL")) returned 1
	[0068.857] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="it", cAlternateFileName="")) returned 1
	[0068.857] SetLastError (dwErrCode=0x0) 
	[0068.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.857] GetLastError () returned 0x5
	[0068.857] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.857] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.857] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.858] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.858] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.858] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.858] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.858] SetLastError (dwErrCode=0x0) 
	[0068.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\it\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\it\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.858] GetLastError () returned 0x5
	[0068.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.858] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.858] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ja", cAlternateFileName="")) returned 1
	[0068.858] SetLastError (dwErrCode=0x0) 
	[0068.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.858] GetLastError () returned 0x5
	[0068.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.858] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.859] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.859] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.859] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.859] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.859] SetLastError (dwErrCode=0x0) 
	[0068.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ja\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ja\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.859] GetLastError () returned 0x5
	[0068.859] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.859] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.859] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="kk", cAlternateFileName="")) returned 1
	[0068.859] SetLastError (dwErrCode=0x0) 
	[0068.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.859] GetLastError () returned 0x5
	[0068.860] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.860] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.860] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0068.860] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.860] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.860] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.860] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0068.860] SetLastError (dwErrCode=0x0) 
	[0068.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\kk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\kk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.860] GetLastError () returned 0x5
	[0068.860] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.860] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.860] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ko", cAlternateFileName="")) returned 1
	[0068.860] SetLastError (dwErrCode=0x0) 
	[0068.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.860] GetLastError () returned 0x5
	[0068.860] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.860] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.860] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.860] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.861] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.861] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.861] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.861] SetLastError (dwErrCode=0x0) 
	[0068.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ko\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ko\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.861] GetLastError () returned 0x5
	[0068.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.861] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.861] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lt", cAlternateFileName="")) returned 1
	[0068.861] SetLastError (dwErrCode=0x0) 
	[0068.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.861] GetLastError () returned 0x5
	[0068.861] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.861] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.861] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0068.861] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.861] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.861] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.861] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0068.861] SetLastError (dwErrCode=0x0) 
	[0068.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.862] GetLastError () returned 0x5
	[0068.862] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.862] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.862] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lv", cAlternateFileName="")) returned 1
	[0068.862] SetLastError (dwErrCode=0x0) 
	[0068.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.862] GetLastError () returned 0x5
	[0068.862] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.862] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.863] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0068.863] SetLastError (dwErrCode=0x0) 
	[0068.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\lv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\lv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.863] GetLastError () returned 0x5
	[0068.863] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.863] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ms", cAlternateFileName="")) returned 1
	[0068.863] SetLastError (dwErrCode=0x0) 
	[0068.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.863] GetLastError () returned 0x5
	[0068.863] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.863] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.863] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.863] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0068.864] SetLastError (dwErrCode=0x0) 
	[0068.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ms\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ms\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.864] GetLastError () returned 0x5
	[0068.864] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.864] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.864] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b3ce622, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll", cAlternateFileName="")) returned 1
	[0068.864] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b3a83c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b3a83c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2126, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSIPCEvents.man", cAlternateFileName="MSIPCE~1.MAN")) returned 1
	[0068.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a5c
	[0068.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.865] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nl", cAlternateFileName="")) returned 1
	[0068.865] SetLastError (dwErrCode=0x0) 
	[0068.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.865] GetLastError () returned 0x5
	[0068.865] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.865] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.866] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.866] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.866] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.866] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.866] SetLastError (dwErrCode=0x0) 
	[0068.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\nl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\nl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.866] GetLastError () returned 0x5
	[0068.866] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.866] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.866] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="no", cAlternateFileName="")) returned 1
	[0068.866] SetLastError (dwErrCode=0x0) 
	[0068.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.866] GetLastError () returned 0x5
	[0068.866] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.866] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.866] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.867] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.867] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.867] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.867] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.868] SetLastError (dwErrCode=0x0) 
	[0068.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\no\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\no\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.868] GetLastError () returned 0x5
	[0068.868] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.868] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.868] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pl", cAlternateFileName="")) returned 1
	[0068.868] SetLastError (dwErrCode=0x0) 
	[0068.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.868] GetLastError () returned 0x5
	[0068.868] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.868] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.868] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.869] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.869] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.869] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69259a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69259a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.869] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.869] SetLastError (dwErrCode=0x0) 
	[0068.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.869] GetLastError () returned 0x5
	[0068.869] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.869] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.869] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt", cAlternateFileName="")) returned 1
	[0068.869] SetLastError (dwErrCode=0x0) 
	[0068.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.869] GetLastError () returned 0x5
	[0068.869] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.869] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.869] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.870] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.870] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.870] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.870] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.870] SetLastError (dwErrCode=0x0) 
	[0068.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.870] GetLastError () returned 0x5
	[0068.870] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.870] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.870] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0068.870] SetLastError (dwErrCode=0x0) 
	[0068.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.871] GetLastError () returned 0x5
	[0068.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.871] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0068.871] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.871] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.871] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.871] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0068.871] SetLastError (dwErrCode=0x0) 
	[0068.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\pt-BR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\pt-br\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.871] GetLastError () returned 0x5
	[0068.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.871] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.871] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ro", cAlternateFileName="")) returned 1
	[0068.871] SetLastError (dwErrCode=0x0) 
	[0068.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.871] GetLastError () returned 0x5
	[0068.871] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.871] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.872] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.872] SetLastError (dwErrCode=0x0) 
	[0068.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ro\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.872] GetLastError () returned 0x5
	[0068.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.872] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ru", cAlternateFileName="")) returned 1
	[0068.872] SetLastError (dwErrCode=0x0) 
	[0068.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.872] GetLastError () returned 0x5
	[0068.872] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.872] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.872] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.872] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0068.872] SetLastError (dwErrCode=0x0) 
	[0068.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\ru\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ru\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.873] GetLastError () returned 0x5
	[0068.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.873] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.873] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sk", cAlternateFileName="")) returned 1
	[0068.873] SetLastError (dwErrCode=0x0) 
	[0068.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.873] GetLastError () returned 0x5
	[0068.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.873] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0068.873] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.873] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.873] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5498, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.873] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0068.873] SetLastError (dwErrCode=0x0) 
	[0068.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.873] GetLastError () returned 0x5
	[0068.873] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.873] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.873] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sl", cAlternateFileName="")) returned 1
	[0068.873] SetLastError (dwErrCode=0x0) 
	[0068.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.874] GetLastError () returned 0x5
	[0068.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.874] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.874] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.874] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.874] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.874] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.874] SetLastError (dwErrCode=0x0) 
	[0068.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sl\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sl\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.874] GetLastError () returned 0x5
	[0068.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.874] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.874] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Cyrl-BA", cAlternateFileName="SR-CYR~1")) returned 1
	[0068.874] SetLastError (dwErrCode=0x0) 
	[0068.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.874] GetLastError () returned 0x5
	[0068.874] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.874] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.874] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.874] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.875] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.875] SetLastError (dwErrCode=0x0) 
	[0068.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-BA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-ba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.875] GetLastError () returned 0x5
	[0068.875] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.875] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.875] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Cyrl-CS", cAlternateFileName="SR-CYR~2")) returned 1
	[0068.875] SetLastError (dwErrCode=0x0) 
	[0068.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.875] GetLastError () returned 0x5
	[0068.875] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.875] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.875] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.875] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.875] SetLastError (dwErrCode=0x0) 
	[0068.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Cyrl-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-cyrl-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.876] GetLastError () returned 0x5
	[0068.876] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.876] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.876] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0068.876] SetLastError (dwErrCode=0x0) 
	[0068.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.876] GetLastError () returned 0x5
	[0068.876] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.876] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0068.885] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.885] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.885] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.885] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0068.885] SetLastError (dwErrCode=0x0) 
	[0068.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sr-Latn-CS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sr-latn-cs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.885] GetLastError () returned 0x5
	[0068.885] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.885] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.885] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="sv", cAlternateFileName="")) returned 1
	[0068.885] SetLastError (dwErrCode=0x0) 
	[0068.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.886] GetLastError () returned 0x5
	[0068.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.886] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0068.886] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.886] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.886] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.886] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\sv\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\sv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.886] GetLastError () returned 0x5
	[0068.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.886] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.886] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="th", cAlternateFileName="")) returned 1
	[0068.886] SetLastError (dwErrCode=0x0) 
	[0068.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.886] GetLastError () returned 0x5
	[0068.886] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.886] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.887] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.887] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.887] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.887] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.888] SetLastError (dwErrCode=0x0) 
	[0068.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\th\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\th\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.888] GetLastError () returned 0x5
	[0068.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.888] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.888] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="tr", cAlternateFileName="")) returned 1
	[0068.888] SetLastError (dwErrCode=0x0) 
	[0068.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.888] GetLastError () returned 0x5
	[0068.888] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.888] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0068.888] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.888] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.888] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.888] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0068.888] SetLastError (dwErrCode=0x0) 
	[0068.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\tr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\tr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.889] GetLastError () returned 0x5
	[0068.889] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.889] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.889] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="uk", cAlternateFileName="")) returned 1
	[0068.889] SetLastError (dwErrCode=0x0) 
	[0068.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.889] GetLastError () returned 0x5
	[0068.889] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.889] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.889] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.889] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.889] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.889] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.889] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.889] SetLastError (dwErrCode=0x0) 
	[0068.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\uk\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\uk\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.889] GetLastError () returned 0x5
	[0068.889] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.890] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.890] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vi", cAlternateFileName="")) returned 1
	[0068.890] SetLastError (dwErrCode=0x0) 
	[0068.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.890] GetLastError () returned 0x5
	[0068.890] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.890] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.890] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.890] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.890] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.890] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.890] SetLastError (dwErrCode=0x0) 
	[0068.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\vi\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\vi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.890] GetLastError () returned 0x5
	[0068.890] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.890] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.890] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0068.890] SetLastError (dwErrCode=0x0) 
	[0068.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.891] GetLastError () returned 0x5
	[0068.891] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.891] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.891] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0068.892] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.892] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.892] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.892] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0068.892] SetLastError (dwErrCode=0x0) 
	[0068.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-CN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-cn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.892] GetLastError () returned 0x5
	[0068.892] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.892] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.892] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0068.892] SetLastError (dwErrCode=0x0) 
	[0068.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.892] GetLastError () returned 0x5
	[0068.892] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.892] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.892] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0068.893] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.893] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 1
	[0068.893] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3898, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msipc.dll.mui", cAlternateFileName="MSIPCD~1.MUI")) returned 0
	[0068.893] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0068.893] SetLastError (dwErrCode=0x0) 
	[0068.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\zh-TW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\zh-tw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.893] GetLastError () returned 0x5
	[0068.893] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0068.893] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.893] FindNextFileW (in: hFindFile=0x274bd1fc4f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0068.893] FindClose (in: hFindFile=0x274bd1fc4f0 | out: hFindFile=0x274bd1fc4f0) returned 1
	[0068.893] SetLastError (dwErrCode=0x0) 
	[0068.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.893] GetLastError () returned 0x5
	[0068.893] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.893] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.893] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1
	[0068.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a58
	[0068.894] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.894] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe24e42d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe24e42d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2661a3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOCF.DLL", cAlternateFileName="")) returned 1
	[0068.894] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6070, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOCFUIUTILITIESDLL.DLL", cAlternateFileName="MSOCFU~1.DLL")) returned 1
	[0068.894] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b382177, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b3a83c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed650, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOCR.DLL", cAlternateFileName="")) returned 1
	[0068.894] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c3218, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOCRRES.ORP", cAlternateFileName="")) returned 1
	[0068.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a60
	[0068.895] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.895] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msoetwres.dll", cAlternateFileName="MSOETW~1.DLL")) returned 1
	[0068.895] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xede4358a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa6b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msoev.exe", cAlternateFileName="")) returned 1
	[0068.896] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3a5762f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19c60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOHEV.DLL", cAlternateFileName="")) returned 1
	[0068.896] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOHEVI.DLL", cAlternateFileName="")) returned 1
	[0068.896] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24e42d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOHTMED.EXE", cAlternateFileName="")) returned 1
	[0068.896] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1be16917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c648aa6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66250, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msoia.exe", cAlternateFileName="")) returned 1
	[0068.896] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5e80, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msoianetutil.dll", cAlternateFileName="MSOIAN~1.DLL")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2a8cc4b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2a8cc4b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2c30669, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOSB.DLL", cAlternateFileName="")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOSREC.EXE", cAlternateFileName="")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc078, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOSTYLE.DLL", cAlternateFileName="")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef07151c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef3deb63, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x74860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOSYNC.EXE", cAlternateFileName="")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed5eb1ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xac58, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msotd.exe", cAlternateFileName="")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d0c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msotdaddin.dll", cAlternateFileName="MSOTDA~1.DLL")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msotelemetry.dll", cAlternateFileName="MSOTEL~1.DLL")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2720687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9be60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOUC.EXE", cAlternateFileName="")) returned 1
	[0068.897] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1
	[0068.897] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a64
	[0068.897] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.898] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca4703d4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9eedd13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOUTL.OLB", cAlternateFileName="")) returned 1
	[0068.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a68
	[0068.898] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.899] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x7f63b8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x46860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOUTLS.DLL", cAlternateFileName="")) returned 1
	[0068.899] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b580a61, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b580a61, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b580a61, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPJEVTS.DLL", cAlternateFileName="")) returned 1
	[0068.899] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66a68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPPT.OLB", cAlternateFileName="")) returned 1
	[0068.899] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a6c
	[0068.899] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.899] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xe80e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPRJ.OLB", cAlternateFileName="")) returned 1
	[0068.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a70
	[0068.900] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.900] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3605252, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3605252, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd4ff3b77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d8a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msproof7.dll", cAlternateFileName="")) returned 1
	[0068.900] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca4703d4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb0f5967, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x214298, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPST32.DLL", cAlternateFileName="")) returned 1
	[0068.900] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc33c8ea0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4f0ed48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5124e28, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02e48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPUB.EXE", cAlternateFileName="")) returned 1
	[0068.900] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc3bb225, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc6b6198, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62b, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mspub.exe.manifest", cAlternateFileName="MSPUBE~1.MAN")) returned 1
	[0068.900] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41874, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPUB.TLB", cAlternateFileName="")) returned 1
	[0068.900] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a74
	[0068.901] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.901] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c66ecc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPUB.VisualElementsManifest.xml", cAlternateFileName="MSPUBV~1.XML")) returned 1
	[0068.901] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a78
	[0068.902] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.902] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee37a832, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef39274d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcea40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSQRY32.EXE", cAlternateFileName="")) returned 1
	[0068.902] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27230, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSRTEDIT.DLL", cAlternateFileName="")) returned 1
	[0068.902] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd1bd051, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec4432c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdec90856, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0068.902] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0068.902] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd1e31f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec6a56c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecb6a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0068.902] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c66ecc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3040, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSWORD.OLB", cAlternateFileName="")) returned 1
	[0068.902] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a7c
	[0068.902] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.903] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa4e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSYUBIN7.DLL", cAlternateFileName="")) returned 1
	[0068.903] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb013b61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462700, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSZIP.DIC", cAlternateFileName="")) returned 1
	[0068.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a80
	[0068.903] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.903] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c6e13e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e13, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="muauth.cab", cAlternateFileName="")) returned 1
	[0068.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a84
	[0068.905] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.905] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MYSL.ICO", cAlternateFileName="")) returned 1
	[0068.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a88
	[0068.905] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.905] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ae48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NAME.DLL", cAlternateFileName="")) returned 1
	[0068.905] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5868, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NAMECONTROLPROXY.DLL", cAlternateFileName="NAMECO~1.DLL")) returned 1
	[0068.906] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2366bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2471bd1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f268, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NAMECONTROLSERVER.EXE", cAlternateFileName="NAMECO~1.EXE")) returned 1
	[0068.906] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b7e331c, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b7e331c, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x4c0c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NAMEEXT.DLL", cAlternateFileName="")) returned 1
	[0068.906] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c6e13e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4630f, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NativeHostAnnotationApp.xap", cAlternateFileName="NATIVE~1.XAP")) returned 1
	[0068.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a8c
	[0068.906] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.906] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c648aa6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6a9, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NativeHostPollApp.xap", cAlternateFileName="NATIVE~2.XAP")) returned 1
	[0068.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a90
	[0068.907] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x794a98, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NL7Data0011.DLL", cAlternateFileName="NL7DAT~1.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c72d887, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2602f8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NL7Lexicons0011.DLL", cAlternateFileName="NL7LEX~1.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5196662, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5196662, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8c7380a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55bef8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NL7MODELS0009.dll", cAlternateFileName="NL7MOD~1.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5208c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5208c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97ecd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5dd8f8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NL7MODELS000A.dll", cAlternateFileName="NL7MOD~2.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc527b37f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc527b37f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd928f97c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x546ef8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NL7MODELS000C.dll", cAlternateFileName="NL7MOD~3.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c779d41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad698, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NL7Models0011.DLL", cAlternateFileName="NL7MOD~4.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2a40778, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2a40778, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2c7cb2a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa320, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="NPSPWRAP.DLL", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc34153d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd50d8964, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52c882e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1165048, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OART.DLL", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c79ffa0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3262b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OARTODF.DLL", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37c48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OCHelper.dll", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd41f54a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecb6a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x103668, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ocimport.dll", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OCIntlDate.dll", cAlternateFileName="OCINTL~1.DLL")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c7ec45a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c6b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ocmsptls.dll", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c7c61f2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c848, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OcOffice.dll", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f74a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ocogl.dll", cAlternateFileName="")) returned 1
	[0068.907] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15956, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Ocomprivate.zip", cAlternateFileName="OCOMPR~1.ZIP")) returned 1
	[0068.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a94
	[0068.908] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x247ab8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ocpptview.dll", cAlternateFileName="OCPPTV~1.DLL")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c838905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55cc0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ocppvwintl.dll", cAlternateFileName="OCPPVW~1.DLL")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed3aee76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3aee76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda6387a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OcPubMgr.exe", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd41f54a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecb6a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaaa8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ocrec.dll", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c838905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a6b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OCSAEXT.dll", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb9038f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OFFRHD.DLL", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x607cb8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OIMG.DLL", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40c60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OLKFSTUB.DLL", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4703d4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca829e1e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb11bbad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63d2c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OLMAPI32.DLL", cAlternateFileName="")) returned 1
	[0068.908] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x172bc, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OMML2MML.XSL", cAlternateFileName="")) returned 1
	[0068.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a98
	[0068.910] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2ec8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53ad8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x316d8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca57b43c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb0cf768, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9de60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x376c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONBttnPPT.dll", cAlternateFileName="ONBTTN~2.DLL")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37c58, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1
	[0068.910] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OneNote", cAlternateFileName="")) returned 1
	[0068.910] SetLastError (dwErrCode=0x0) 
	[0068.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.910] GetLastError () returned 0x5
	[0068.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.910] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0068.911] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.911] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prnms006.inf", cAlternateFileName="")) returned 1
	[0068.911] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4aa0
	[0068.912] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.912] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prnSendToOneNote.cat", cAlternateFileName="PRNSEN~2.CAT")) returned 1
	[0068.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4aa4
	[0068.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.913] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prnSendToOneNote_win7.cat", cAlternateFileName="PRNSEN~1.CAT")) returned 1
	[0068.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4aa8
	[0068.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.913] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="prnSendToOneNote_win7.inf", cAlternateFileName="PRNSEN~1.INF")) returned 1
	[0068.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4aac
	[0068.914] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.915] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNote-manifest.ini", cAlternateFileName="SENDTO~1.INI")) returned 1
	[0068.915] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNote-PipelineConfig.xml", cAlternateFileName="SENDTO~1.XML")) returned 1
	[0068.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ab0
	[0068.915] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.915] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c884dc0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c884dc0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2560, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNote.gpd", cAlternateFileName="SENDTO~1.GPD")) returned 1
	[0068.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ab4
	[0068.916] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.916] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8ab024, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNote.ini", cAlternateFileName="SENDTO~2.INI")) returned 1
	[0068.916] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x180d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNoteFilter.dll", cAlternateFileName="SENDTO~1.DLL")) returned 1
	[0068.916] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8ab024, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 1
	[0068.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ab8
	[0068.917] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.917] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8ab024, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SendToOneNoteNames.gpd", cAlternateFileName="SENDTO~2.GPD")) returned 0
	[0068.917] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0068.918] SetLastError (dwErrCode=0x0) 
	[0068.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.920] GetLastError () returned 0x5
	[0068.920] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.920] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.920] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1
	[0068.920] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONENOTE.VisualElementsManifest.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0068.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a9c
	[0068.920] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4fa8f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4fa8f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a0b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x313650, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19a88, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdc4086cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4f6fc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xed9050, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONPPTAddin.dll", cAlternateFileName="ONPPTA~1.DLL")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7f57ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7f57ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd01a5a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8dbe58, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONRES.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c858, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ONWordAddin.dll", cAlternateFileName="ONWORD~1.DLL")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ebdfb8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1bbad0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa4690, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ORGCHART.EXE", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ee42e7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xacac8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x174f451, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ad8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8d1261, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1938c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OSF.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd29ce0e8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd29ce0e8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b4b84a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OSFPROXY.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OSFROAMINGPROXY.DLL", cAlternateFileName="OSFROA~1.DLL")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x308c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OSFSHARED.DLL", cAlternateFileName="OSFSHA~1.DLL")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OSFUI.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca57b43c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca5a1676, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c4a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1
	[0068.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1
	[0068.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4abc
	[0068.922] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.922] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab940, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1
	[0068.922] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbce68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1
	[0068.922] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212b448, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1
	[0068.922] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca850099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="OUTLOO~1.MAN")) returned 1
	[0068.922] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLOOK.VisualElementsManifest.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0068.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac0
	[0068.923] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.923] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OutlookAutoDiscover", cAlternateFileName="OUTLOO~1")) returned 1
	[0068.923] SetLastError (dwErrCode=0x0) 
	[0068.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.923] GetLastError () returned 0x5
	[0068.923] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0068.923] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0068.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0068.925] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.926] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AMERITECH.NET.XML", cAlternateFileName="AMERIT~1.XML")) returned 1
	[0068.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac8
	[0068.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.927] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BTINTERNET.NET.XML", cAlternateFileName="BTINTE~1.XML")) returned 1
	[0068.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4acc
	[0068.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.928] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BTOPENWORLD.COM.XML", cAlternateFileName="BTOPEN~1.XML")) returned 1
	[0068.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ad0
	[0068.928] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.928] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c91d744, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c91d744, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLASH.NET.XML", cAlternateFileName="FLASHN~1.XML")) returned 1
	[0068.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ad4
	[0068.929] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.929] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GMAIL.COM.XML", cAlternateFileName="GMAILC~1.XML")) returned 1
	[0068.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ad8
	[0068.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.931] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NL.ROGERS.COM.XML", cAlternateFileName="NLROGE~1.XML")) returned 1
	[0068.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4adc
	[0068.931] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.931] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NVBELL.NET.XML", cAlternateFileName="NVBELL~1.XML")) returned 1
	[0068.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ae0
	[0068.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.932] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PACBELL.NET.XML", cAlternateFileName="PACBEL~1.XML")) returned 1
	[0068.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ae4
	[0068.933] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.933] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PRODIGY.NET.XML", cAlternateFileName="PRODIG~1.XML")) returned 1
	[0068.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ae8
	[0068.934] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.934] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROGERS.COM.XML", cAlternateFileName="ROGERS~1.XML")) returned 1
	[0068.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4aec
	[0068.934] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.935] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SBCGLOBAL.NET.XML", cAlternateFileName="SBCGLO~1.XML")) returned 1
	[0068.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4af0
	[0068.935] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.935] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SNET.NET.XML", cAlternateFileName="SNETNE~1.XML")) returned 1
	[0068.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4af4
	[0068.936] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.936] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SWBELL.NET.XML", cAlternateFileName="SWBELL~1.XML")) returned 1
	[0068.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4af8
	[0068.937] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.937] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c943977, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c943977, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TALK21.COM.XML", cAlternateFileName="TALK21~1.XML")) returned 1
	[0068.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4afc
	[0068.938] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.938] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WANS.NET.XML", cAlternateFileName="WANSNE~1.XML")) returned 1
	[0068.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.938] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b00
	[0068.938] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.939] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CA.XML", cAlternateFileName="YA4C16~1.XML")) returned 1
	[0068.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b04
	[0068.939] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.940] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.ID.XML", cAlternateFileName="YA6C44~1.XML")) returned 1
	[0068.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b08
	[0068.940] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.940] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.IN.XML", cAlternateFileName="YA8E91~1.XML")) returned 1
	[0068.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0c
	[0068.941] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.941] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.JP.XML", cAlternateFileName="YA40E5~1.XML")) returned 1
	[0068.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b10
	[0068.942] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.942] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.KR.XML", cAlternateFileName="YAHOOC~4.XML")) returned 1
	[0068.942] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b14
	[0068.942] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.943] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.NZ.XML", cAlternateFileName="YAHOOC~1.XML")) returned 1
	[0068.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b18
	[0068.943] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.943] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.TH.XML", cAlternateFileName="YACB7D~1.XML")) returned 1
	[0068.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b1c
	[0068.944] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.944] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.CO.UK.XML", cAlternateFileName="YAHOOC~3.XML")) returned 1
	[0068.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b20
	[0068.945] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.945] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c969bd6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.AR.XML", cAlternateFileName="YAHOOC~2.XML")) returned 1
	[0068.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b24
	[0068.946] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.946] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.AU.XML", cAlternateFileName="YA02CD~1.XML")) returned 1
	[0068.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b28
	[0068.947] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.947] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d2f32c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d2f32c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.BR.XML", cAlternateFileName="YA6DAE~1.XML")) returned 1
	[0068.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b2c
	[0068.948] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.948] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.CN.XML", cAlternateFileName="YA819F~1.XML")) returned 1
	[0068.948] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b30
	[0068.948] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.949] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.HK.XML", cAlternateFileName="YA56AC~1.XML")) returned 1
	[0068.949] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b34
	[0068.949] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.950] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.MX.XML", cAlternateFileName="YAEA08~1.XML")) returned 1
	[0068.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b38
	[0068.950] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.950] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.MY.XML", cAlternateFileName="YA0670~1.XML")) returned 1
	[0068.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b3c
	[0068.951] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.951] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.PH.XML", cAlternateFileName="YA6D1B~1.XML")) returned 1
	[0068.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b40
	[0068.952] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.952] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.SG.XML", cAlternateFileName="YAC50A~1.XML")) returned 1
	[0068.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b44
	[0068.953] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.953] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c969bd6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c969bd6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c98fe3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.TW.XML", cAlternateFileName="YAB0F6~1.XML")) returned 1
	[0068.953] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b48
	[0068.954] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.954] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.VN.XML", cAlternateFileName="YA38FD~1.XML")) returned 1
	[0068.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b4c
	[0068.954] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.955] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fc39fa2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc6021a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.COM.XML", cAlternateFileName="YA531A~1.XML")) returned 1
	[0068.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b50
	[0068.955] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.956] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fc86400, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.DE.XML", cAlternateFileName="YAHOOD~1.XML")) returned 1
	[0068.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b54
	[0068.956] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.957] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x328, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.ES.XML", cAlternateFileName="YAHOOE~1.XML")) returned 1
	[0068.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b58
	[0068.957] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.958] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.FR.XML", cAlternateFileName="YAHOOF~1.XML")) returned 1
	[0068.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b5c
	[0068.958] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.959] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9dc2d6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.HK.XML", cAlternateFileName="YAHOOH~1.XML")) returned 1
	[0068.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b60
	[0068.959] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0068.960] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.IE.XML", cAlternateFileName="YAHOOI~2.XML")) returned 1
	[0068.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0068.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b64
	[0068.960] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.066] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x324, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.IT.XML", cAlternateFileName="YAHOOI~1.XML")) returned 1
	[0069.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b68
	[0069.067] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.067] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x331, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.JP.XML", cAlternateFileName="YAHOOJ~1.XML")) returned 1
	[0069.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b6c
	[0069.067] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.068] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.NO.XML", cAlternateFileName="YAHOON~1.XML")) returned 1
	[0069.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b70
	[0069.068] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.068] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c98fe3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c98fe3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.PL.XML", cAlternateFileName="YAHOOP~1.XML")) returned 1
	[0069.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b74
	[0069.069] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.069] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 1
	[0069.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b78
	[0069.070] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.070] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="YAHOO.SE.XML", cAlternateFileName="YAHOOS~1.XML")) returned 0
	[0069.103] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0069.104] SetLastError (dwErrCode=0x0) 
	[0069.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.106] GetLastError () returned 0x5
	[0069.106] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.106] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.106] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656d8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1
	[0069.106] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb438, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLRPC.DLL", cAlternateFileName="")) returned 1
	[0069.106] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146b8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OUTLVBS.DLL", cAlternateFileName="")) returned 1
	[0069.106] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2981bec, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2981bec, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a8cc4b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29f6c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1
	[0069.106] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PAGESIZE", cAlternateFileName="")) returned 1
	[0069.106] SetLastError (dwErrCode=0x0) 
	[0069.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.106] GetLastError () returned 0x5
	[0069.106] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.106] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0069.108] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.108] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc3bb225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfb6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL001.XML", cAlternateFileName="")) returned 1
	[0069.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b7c
	[0069.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.109] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15b1fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL002.XML", cAlternateFileName="")) returned 1
	[0069.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b80
	[0069.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.110] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d2f32c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d2f32c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d2f32c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3562e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL010.XML", cAlternateFileName="")) returned 1
	[0069.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b84
	[0069.110] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.110] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c9b60b5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1c9b60b5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1390, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL011.XML", cAlternateFileName="")) returned 1
	[0069.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b88
	[0069.111] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.111] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb89a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL012.XML", cAlternateFileName="")) returned 1
	[0069.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b8c
	[0069.112] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.112] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22cf0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL016.XML", cAlternateFileName="")) returned 1
	[0069.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b90
	[0069.112] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.112] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d2f32c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d2f32c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d2f32c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x101bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL020.XML", cAlternateFileName="")) returned 1
	[0069.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b94
	[0069.113] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.113] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL022.XML", cAlternateFileName="")) returned 1
	[0069.113] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b98
	[0069.114] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.114] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL026.XML", cAlternateFileName="")) returned 1
	[0069.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b9c
	[0069.115] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.115] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d2f32c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d2f32c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a3e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL027.XML", cAlternateFileName="")) returned 1
	[0069.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ba0
	[0069.115] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.116] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d2f32c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d2f32c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d2f32c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x266a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL044.XML", cAlternateFileName="")) returned 1
	[0069.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ba4
	[0069.116] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.116] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104bba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL048.XML", cAlternateFileName="")) returned 1
	[0069.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ba8
	[0069.117] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.117] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f76, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL054.XML", cAlternateFileName="")) returned 1
	[0069.117] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bac
	[0069.118] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.118] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26c44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL058.XML", cAlternateFileName="")) returned 1
	[0069.118] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bb0
	[0069.118] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.119] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e394, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL065.XML", cAlternateFileName="")) returned 1
	[0069.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bb4
	[0069.119] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.119] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacb30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL075.XML", cAlternateFileName="")) returned 1
	[0069.119] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bb8
	[0069.120] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.120] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6134, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL077.XML", cAlternateFileName="")) returned 1
	[0069.120] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bbc
	[0069.121] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.121] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d319566, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d319566, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x753, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL078.XML", cAlternateFileName="")) returned 1
	[0069.121] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc0
	[0069.121] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.122] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcffca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL081.XML", cAlternateFileName="")) returned 1
	[0069.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc4
	[0069.122] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.122] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fc13dfb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1fc13dfb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38d3a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL082.XML", cAlternateFileName="")) returned 1
	[0069.122] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc8
	[0069.123] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.123] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f09a814, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1f09a814, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc13dfb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL083.XML", cAlternateFileName="")) returned 1
	[0069.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bcc
	[0069.124] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.124] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa88e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL086.XML", cAlternateFileName="")) returned 1
	[0069.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bd0
	[0069.124] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.124] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d33f7b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL087.XML", cAlternateFileName="")) returned 1
	[0069.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bd4
	[0069.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.125] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb532, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL089.XML", cAlternateFileName="")) returned 1
	[0069.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bd8
	[0069.126] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.126] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aaea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL090.XML", cAlternateFileName="")) returned 1
	[0069.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bdc
	[0069.126] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.127] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a22, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL092.XML", cAlternateFileName="")) returned 1
	[0069.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4be0
	[0069.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.127] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d33f7b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d33f7b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb3da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL093.XML", cAlternateFileName="")) returned 1
	[0069.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4be4
	[0069.128] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.128] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f0c0a66, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1f0c0a66, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ccc2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL095.XML", cAlternateFileName="")) returned 1
	[0069.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4be8
	[0069.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.129] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a58e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL096.XML", cAlternateFileName="")) returned 1
	[0069.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bec
	[0069.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.130] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL097.XML", cAlternateFileName="")) returned 1
	[0069.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bf0
	[0069.130] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.130] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL102.XML", cAlternateFileName="")) returned 1
	[0069.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bf4
	[0069.131] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.131] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5a1d84, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL103.XML", cAlternateFileName="")) returned 1
	[0069.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bf8
	[0069.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.132] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600b4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL104.XML", cAlternateFileName="")) returned 1
	[0069.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bfc
	[0069.188] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.188] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5a1d84, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23124, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL105.XML", cAlternateFileName="")) returned 1
	[0069.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c04
	[0069.190] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.190] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL106.XML", cAlternateFileName="")) returned 1
	[0069.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c08
	[0069.191] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.191] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d3659fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL107.XML", cAlternateFileName="")) returned 1
	[0069.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c0c
	[0069.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.192] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5a1d84, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dbec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL108.XML", cAlternateFileName="")) returned 1
	[0069.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c10
	[0069.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.192] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5a1d84, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL109.XML", cAlternateFileName="")) returned 1
	[0069.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c14
	[0069.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.193] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL110.XML", cAlternateFileName="")) returned 1
	[0069.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c18
	[0069.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.194] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d3659fb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d3659fb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40198, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL111.XML", cAlternateFileName="")) returned 1
	[0069.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c1c
	[0069.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.195] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5a1d84, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x789e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL112.XML", cAlternateFileName="")) returned 1
	[0069.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c20
	[0069.196] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.196] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fc39fa2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e08a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL115.XML", cAlternateFileName="")) returned 1
	[0069.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c24
	[0069.196] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.196] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d791bfc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x169ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL116.XML", cAlternateFileName="")) returned 1
	[0069.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c28
	[0069.197] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.197] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x412c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL117.XML", cAlternateFileName="")) returned 1
	[0069.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c2c
	[0069.198] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.198] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2763a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL118.XML", cAlternateFileName="")) returned 1
	[0069.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c30
	[0069.198] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.199] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa002, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL119.XML", cAlternateFileName="")) returned 1
	[0069.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c34
	[0069.199] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.199] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGLBL120.XML", cAlternateFileName="")) returned 1
	[0069.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c38
	[0069.200] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.200] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc68ff65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2247e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN001.XML", cAlternateFileName="")) returned 1
	[0069.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c3c
	[0069.201] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.201] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN002.XML", cAlternateFileName="")) returned 1
	[0069.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c40
	[0069.201] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.202] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN010.XML", cAlternateFileName="")) returned 1
	[0069.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c44
	[0069.202] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.202] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN011.XML", cAlternateFileName="")) returned 1
	[0069.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c48
	[0069.203] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.203] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5a1d84, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5a1d84, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2936, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN020.XML", cAlternateFileName="")) returned 1
	[0069.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c4c
	[0069.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.204] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN022.XML", cAlternateFileName="")) returned 1
	[0069.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c50
	[0069.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.204] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5ee242, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5ee242, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN026.XML", cAlternateFileName="")) returned 1
	[0069.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c54
	[0069.205] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.205] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5ee242, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5ee242, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5ee242, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN027.XML", cAlternateFileName="")) returned 1
	[0069.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c58
	[0069.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.206] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1412, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN044.XML", cAlternateFileName="")) returned 1
	[0069.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c5c
	[0069.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.207] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae7d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN048.XML", cAlternateFileName="")) returned 1
	[0069.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c60
	[0069.207] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.207] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5ee242, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8250, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN054.XML", cAlternateFileName="")) returned 1
	[0069.207] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c64
	[0069.208] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.208] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5ee242, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN058.XML", cAlternateFileName="")) returned 1
	[0069.208] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c68
	[0069.209] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.209] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d5c7ff6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d5c7ff6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d5c7ff6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN065.XML", cAlternateFileName="")) returned 1
	[0069.209] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c6c
	[0069.209] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.210] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ff4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN075.XML", cAlternateFileName="")) returned 1
	[0069.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c70
	[0069.210] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.210] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbdc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN081.XML", cAlternateFileName="")) returned 1
	[0069.210] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c74
	[0069.211] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.211] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31a78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN082.XML", cAlternateFileName="")) returned 1
	[0069.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c78
	[0069.212] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.212] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN086.XML", cAlternateFileName="")) returned 1
	[0069.212] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c7c
	[0069.213] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.213] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f001f8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1f001f8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1f001f8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN089.XML", cAlternateFileName="")) returned 1
	[0069.213] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c80
	[0069.214] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.214] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN090.XML", cAlternateFileName="")) returned 1
	[0069.214] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c84
	[0069.214] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.215] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d7457f3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d7457f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7457f3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb76, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN092.XML", cAlternateFileName="")) returned 1
	[0069.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c88
	[0069.215] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.215] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d791bfc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN095.XML", cAlternateFileName="")) returned 1
	[0069.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c8c
	[0069.216] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.216] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN096.XML", cAlternateFileName="")) returned 1
	[0069.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c90
	[0069.217] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.217] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11424, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN097.XML", cAlternateFileName="")) returned 1
	[0069.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c94
	[0069.217] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.218] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d7b7e3f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN102.XML", cAlternateFileName="")) returned 1
	[0069.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c98
	[0069.218] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.218] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d791bfc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde0c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN103.XML", cAlternateFileName="")) returned 1
	[0069.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c9c
	[0069.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.219] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN105.XML", cAlternateFileName="")) returned 1
	[0069.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ca0
	[0069.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.220] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d791bfc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN107.XML", cAlternateFileName="")) returned 1
	[0069.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ca4
	[0069.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.221] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN108.XML", cAlternateFileName="")) returned 1
	[0069.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ca8
	[0069.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.222] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aa2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN109.XML", cAlternateFileName="")) returned 1
	[0069.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cac
	[0069.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.222] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d76b9e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1d76b9e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1d76b9e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcae0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN110.XML", cAlternateFileName="")) returned 1
	[0069.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cb0
	[0069.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.223] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f09a814, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1f09a814, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1f0c0a66, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45792, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN111.XML", cAlternateFileName="")) returned 1
	[0069.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cb4
	[0069.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.224] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f09a814, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1f09a814, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN114.XML", cAlternateFileName="")) returned 1
	[0069.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cb8
	[0069.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.225] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f0280f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1f0280f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1f09a814, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PGMN120.XML", cAlternateFileName="")) returned 1
	[0069.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cbc
	[0069.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.226] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcfce125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x943e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 1
	[0069.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc0
	[0069.347] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.347] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcfce125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x943e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PG_INDEX.XML", cAlternateFileName="")) returned 0
	[0069.347] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0069.348] SetLastError (dwErrCode=0x0) 
	[0069.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.350] GetLastError () returned 0x5
	[0069.350] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.350] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.350] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PDFREFLOW.EXE", cAlternateFileName="PDFREF~1.EXE")) returned 1
	[0069.350] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4f30656, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdda50, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PE.DLL", cAlternateFileName="")) returned 1
	[0069.350] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e4e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PEOPLEDATAHANDLER.DLL", cAlternateFileName="PEOPLE~1.DLL")) returned 1
	[0069.350] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55aa8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PerfBoost.exe", cAlternateFileName="PERFBO~1.EXE")) returned 1
	[0069.350] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b63f68c, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b63f68c, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b63f68c, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x32ea8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PJCALEND.DLL", cAlternateFileName="")) returned 1
	[0069.350] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26397db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26397db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc274482a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0069.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac4
	[0069.351] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.351] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd95b0a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97c6b3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c40b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="POWERPNT.EXE", cAlternateFileName="")) returned 1
	[0069.351] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6030bfe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6ac53aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfe0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="powerpnt.exe.manifest", cAlternateFileName="POWERP~1.MAN")) returned 1
	[0069.352] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x215db4dd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="POWERPNT.VisualElementsManifest.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0069.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc4
	[0069.352] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd95d6d40, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d24004, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1178848, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PPCORE.DLL", cAlternateFileName="")) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6246d3c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6246d3c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PPRESOURCES.DLL", cAlternateFileName="PPRESO~1.DLL")) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21057dcc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21673e23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x359640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PPTICO.EXE", cAlternateFileName="")) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18f2ea7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ed0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PROJIMPT.EXE", cAlternateFileName="")) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x436ad46, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x274a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PROJMODL.DLL", cAlternateFileName="")) returned 1
	[0069.353] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0069.353] SetLastError (dwErrCode=0x0) 
	[0069.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.353] GetLastError () returned 0x5
	[0069.353] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.353] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.353] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0069.355] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.355] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0069.355] SetLastError (dwErrCode=0x0) 
	[0069.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.355] GetLastError () returned 0x5
	[0069.355] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0069.355] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0069.356] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.356] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd928f97c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8EN.DLL", cAlternateFileName="")) returned 1
	[0069.356] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd928f97c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8EN.DLL", cAlternateFileName="")) returned 0
	[0069.356] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0069.356] SetLastError (dwErrCode=0x0) 
	[0069.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.356] GetLastError () returned 0x5
	[0069.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0069.356] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.356] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1036", cAlternateFileName="")) returned 1
	[0069.356] SetLastError (dwErrCode=0x0) 
	[0069.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.356] GetLastError () returned 0x5
	[0069.356] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0069.356] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf31b5d3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf31b5d3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafed902, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aab8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8FR.DLL", cAlternateFileName="")) returned 1
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf31b5d3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf31b5d3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafed902, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aab8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8FR.DLL", cAlternateFileName="")) returned 0
	[0069.357] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0069.357] SetLastError (dwErrCode=0x0) 
	[0069.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.357] GetLastError () returned 0x5
	[0069.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0069.357] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3082", cAlternateFileName="")) returned 1
	[0069.357] SetLastError (dwErrCode=0x0) 
	[0069.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.357] GetLastError () returned 0x5
	[0069.357] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0069.357] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb039dcc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8ES.DLL", cAlternateFileName="")) returned 1
	[0069.357] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb039dcc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b050, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8ES.DLL", cAlternateFileName="")) returned 0
	[0069.358] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0069.358] SetLastError (dwErrCode=0x0) 
	[0069.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.358] GetLastError () returned 0x5
	[0069.358] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0069.358] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.358] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msgr8en.dub", cAlternateFileName="")) returned 1
	[0069.358] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ccc
	[0069.358] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.359] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9328217, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x801fc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8EN.LEX", cAlternateFileName="")) returned 1
	[0069.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cd0
	[0069.359] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.359] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb039dcc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb039dcc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb039dcc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msgr8es.dub", cAlternateFileName="")) returned 1
	[0069.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cd4
	[0069.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.360] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb013b61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb013b61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69217c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8ES.LEX", cAlternateFileName="")) returned 1
	[0069.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cd8
	[0069.361] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.361] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb0d2731, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msgr8fr.dub", cAlternateFileName="")) returned 1
	[0069.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cdc
	[0069.361] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.362] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb0d2731, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7740a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSGR8FR.LEX", cAlternateFileName="")) returned 1
	[0069.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ce0
	[0069.362] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.362] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x266d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSHY7EN.DLL", cAlternateFileName="")) returned 1
	[0069.362] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSHY7EN.LEX", cAlternateFileName="")) returned 1
	[0069.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ce4
	[0069.363] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.363] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26c68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSHY7ES.DLL", cAlternateFileName="")) returned 1
	[0069.363] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSHY7ES.LEX", cAlternateFileName="")) returned 1
	[0069.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ce8
	[0069.364] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.364] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26c68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSHY7FR.DLL", cAlternateFileName="")) returned 1
	[0069.364] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb1dd7cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSHY7FR.LEX", cAlternateFileName="")) returned 1
	[0069.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cec
	[0069.364] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.365] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5360180, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5360180, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5360180, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSP7EN.dub", cAlternateFileName="")) returned 1
	[0069.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cf0
	[0069.365] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.365] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5360180, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5360180, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd93746c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x186200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSP7EN.LEX", cAlternateFileName="")) returned 1
	[0069.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cf4
	[0069.366] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.366] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc53863b3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc53863b3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc53863b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSP7ES.dub", cAlternateFileName="")) returned 1
	[0069.366] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cf8
	[0069.367] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.367] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54dd8eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54dd8eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd943329c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ec600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSP7ES.LEX", cAlternateFileName="")) returned 1
	[0069.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cfc
	[0069.367] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.368] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc541ed37, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc541ed37, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSP7FR.dub", cAlternateFileName="")) returned 1
	[0069.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d00
	[0069.368] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.368] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc541ed37, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd945950a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c6a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSP7FR.LEX", cAlternateFileName="")) returned 1
	[0069.368] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d04
	[0069.369] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.369] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc39bed4a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52c882e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc64c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msspell7.dll", cAlternateFileName="")) returned 1
	[0069.369] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb203a02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8EN.DLL", cAlternateFileName="")) returned 1
	[0069.369] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34d200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8EN.LEX", cAlternateFileName="")) returned 1
	[0069.369] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d08
	[0069.370] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.370] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb29c380, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63ac8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8ES.DLL", cAlternateFileName="")) returned 1
	[0069.370] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40b800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8ES.LEX", cAlternateFileName="")) returned 1
	[0069.370] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d0c
	[0069.370] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.371] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64068, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8FR.DLL", cAlternateFileName="")) returned 1
	[0069.371] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8FR.LEX", cAlternateFileName="")) returned 1
	[0069.371] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d10
	[0069.371] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.371] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msth8FR.LEX", cAlternateFileName="")) returned 0
	[0069.371] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0069.372] SetLastError (dwErrCode=0x0) 
	[0069.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.372] GetLastError () returned 0x5
	[0069.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.372] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd504421, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd504421, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd52a5db, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PropertyModelProxy.dll", cAlternateFileName="PROPER~2.DLL")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4f7cb47, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10e0d0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8450, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="protocolhandler.exe", cAlternateFileName="PROTOC~1.EXE")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd504421, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd504421, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecdccb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x151448, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Psom.dll", cAlternateFileName="")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270a48, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd01a5a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7a68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1
	[0069.372] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PUBBA", cAlternateFileName="")) returned 1
	[0069.372] SetLastError (dwErrCode=0x0) 
	[0069.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.372] GetLastError () returned 0x5
	[0069.372] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.372] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0069.374] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.374] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB10.BDR", cAlternateFileName="")) returned 1
	[0069.374] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d14
	[0069.374] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.375] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB11.BDR", cAlternateFileName="")) returned 1
	[0069.375] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d18
	[0069.375] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.376] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf254, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB1A.BDR", cAlternateFileName="")) returned 1
	[0069.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d1c
	[0069.376] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.376] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB1B.BDR", cAlternateFileName="")) returned 1
	[0069.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d20
	[0069.377] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.377] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB2A.BDR", cAlternateFileName="")) returned 1
	[0069.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d24
	[0069.378] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.378] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB2B.BDR", cAlternateFileName="")) returned 1
	[0069.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.378] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d28
	[0069.378] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.379] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB3A.BDR", cAlternateFileName="")) returned 1
	[0069.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d2c
	[0069.379] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.379] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf4e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB3B.BDR", cAlternateFileName="")) returned 1
	[0069.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d30
	[0069.380] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.380] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2169a085, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc144, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB4.BDR", cAlternateFileName="")) returned 1
	[0069.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d34
	[0069.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.381] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcfb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB5A.BDR", cAlternateFileName="")) returned 1
	[0069.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d38
	[0069.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.382] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2476, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB5B.BDR", cAlternateFileName="")) returned 1
	[0069.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d3c
	[0069.455] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.455] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245d6b52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245d6b52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f46, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB6.BDR", cAlternateFileName="")) returned 1
	[0069.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d40
	[0069.456] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.456] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x799a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB7.BDR", cAlternateFileName="")) returned 1
	[0069.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d44
	[0069.457] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.457] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB8.BDR", cAlternateFileName="")) returned 1
	[0069.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d48
	[0069.457] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.458] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 1
	[0069.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d4c
	[0069.458] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.459] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bbe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSPUB9.BDR", cAlternateFileName="")) returned 0
	[0069.459] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0069.460] SetLastError (dwErrCode=0x0) 
	[0069.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.462] GetLastError () returned 0x5
	[0069.462] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.462] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.462] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1
	[0069.463] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf658, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1
	[0069.463] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1
	[0069.463] SetLastError (dwErrCode=0x0) 
	[0069.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.463] GetLastError () returned 0x5
	[0069.463] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0069.463] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0069.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0069.470] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0069.471] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x217f15bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCSBAR.POC", cAlternateFileName="")) returned 1
	[0069.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d50
	[0069.472] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.472] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x216c02db, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x216c02db, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x216c02db, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACCTBOX.POC", cAlternateFileName="")) returned 1
	[0069.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d54
	[0069.473] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.473] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AD.DPV", cAlternateFileName="")) returned 1
	[0069.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d58
	[0069.474] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.474] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AD.XML", cAlternateFileName="")) returned 1
	[0069.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d5c
	[0069.475] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.475] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb95a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AD98.POC", cAlternateFileName="")) returned 1
	[0069.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d60
	[0069.476] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.476] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x854, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADRESPEL.POC", cAlternateFileName="")) returned 1
	[0069.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d64
	[0069.477] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.478] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x594c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AIR98.POC", cAlternateFileName="")) returned 1
	[0069.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d68
	[0069.478] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.479] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa402, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AWARDHM.POC", cAlternateFileName="")) returned 1
	[0069.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d6c
	[0069.479] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.479] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x217f15bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BAN98.POC", cAlternateFileName="")) returned 1
	[0069.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d70
	[0069.480] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.480] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x217f15bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x217f15bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BANNER.DPV", cAlternateFileName="")) returned 1
	[0069.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d74
	[0069.481] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.481] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x236c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BANNER.XML", cAlternateFileName="")) returned 1
	[0069.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d78
	[0069.482] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.482] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BDRTKFUL.POC", cAlternateFileName="")) returned 1
	[0069.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d7c
	[0069.483] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.483] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f40c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIZCARD.DPV", cAlternateFileName="")) returned 1
	[0069.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d80
	[0069.484] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.484] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIZCARD.XML", cAlternateFileName="")) returned 1
	[0069.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d84
	[0069.485] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.485] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2183da4c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7ebe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIZFORM.DPV", cAlternateFileName="")) returned 1
	[0069.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d88
	[0069.486] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.486] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218177f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a46, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIZFORM.XML", cAlternateFileName="")) returned 1
	[0069.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d8c
	[0069.487] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.487] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf0ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BORDERBB.DPV", cAlternateFileName="")) returned 1
	[0069.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d90
	[0069.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.488] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BORDERBB.POC", cAlternateFileName="")) returned 1
	[0069.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d94
	[0069.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.489] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f046, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRCH98SP.POC", cAlternateFileName="")) returned 1
	[0069.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d98
	[0069.489] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.490] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2183da4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2183da4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98f72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRCHUR11.POC", cAlternateFileName="")) returned 1
	[0069.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d9c
	[0069.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.491] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218177f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218177f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x243f1a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRCHUR98.POC", cAlternateFileName="")) returned 1
	[0069.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4da0
	[0069.491] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.492] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7190, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BROCHURE.DPV", cAlternateFileName="")) returned 1
	[0069.492] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4da4
	[0069.594] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.594] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21863ca8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x757a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BROCHURE.XML", cAlternateFileName="")) returned 1
	[0069.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4da8
	[0069.595] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.595] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa28, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS2BARB.POC", cAlternateFileName="")) returned 1
	[0069.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dac
	[0069.596] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.596] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS4BOXES.POC", cAlternateFileName="")) returned 1
	[0069.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4db0
	[0069.596] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.596] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BS53BOXS.POC", cAlternateFileName="")) returned 1
	[0069.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4db4
	[0069.597] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.597] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c2a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BZCARD11.POC", cAlternateFileName="")) returned 1
	[0069.597] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4db8
	[0069.598] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.598] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BZCARDHM.POC", cAlternateFileName="")) returned 1
	[0069.598] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dbc
	[0069.598] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.599] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6214, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BZCD98SP.POC", cAlternateFileName="")) returned 1
	[0069.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.599] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc0
	[0069.599] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.599] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21889f0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3caa2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BZCRD98.POC", cAlternateFileName="")) returned 1
	[0069.599] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc4
	[0069.600] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.600] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21863ca8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21863ca8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x148f52, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALENDAR.DPV", cAlternateFileName="")) returned 1
	[0069.600] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.600] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc8
	[0069.601] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.601] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218b0166, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218b0166, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2614, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALENDAR.XML", cAlternateFileName="")) returned 1
	[0069.601] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dcc
	[0069.602] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.602] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218b0166, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x329e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALHM.POC", cAlternateFileName="")) returned 1
	[0069.602] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dd0
	[0069.603] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.603] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21889f0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21889f0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6da2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALNDR98.POC", cAlternateFileName="")) returned 1
	[0069.604] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dd4
	[0069.604] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.605] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b8c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALSO11.POC", cAlternateFileName="")) returned 1
	[0069.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.605] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dd8
	[0069.605] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.605] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x696d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALSO98.POC", cAlternateFileName="")) returned 1
	[0069.605] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ddc
	[0069.606] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.606] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e4ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CATALOG.DPV", cAlternateFileName="")) returned 1
	[0069.606] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4de0
	[0069.607] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.607] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CATALOG.XML", cAlternateFileName="")) returned 1
	[0069.607] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4de4
	[0069.607] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.607] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x218d63bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62f96, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CATWIZ.POC", cAlternateFileName="")) returned 1
	[0069.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4de8
	[0069.608] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.608] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24f44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CATWIZ11.POC", cAlternateFileName="")) returned 1
	[0069.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dec
	[0069.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.609] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c1df, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CERT.DPV", cAlternateFileName="")) returned 1
	[0069.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4df0
	[0069.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.610] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x170a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CERT.XML", cAlternateFileName="")) returned 1
	[0069.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4df4
	[0069.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.611] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11b82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CERT98.POC", cAlternateFileName="")) returned 1
	[0069.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4df8
	[0069.611] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.611] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CERT98SP.POC", cAlternateFileName="")) returned 1
	[0069.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dfc
	[0069.612] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.612] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x170e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHECKER.POC", cAlternateFileName="")) returned 1
	[0069.612] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.612] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e00
	[0069.613] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.613] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x218d63bb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x218d63bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2808, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONTACTINFOBB.DPV", cAlternateFileName="CONTAC~1.DPV")) returned 1
	[0069.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e04
	[0069.613] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.613] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ce8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONTACTINFOBB.POC", cAlternateFileName="CONTAC~1.POC")) returned 1
	[0069.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e08
	[0069.614] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.614] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc692, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COUPON.POC", cAlternateFileName="")) returned 1
	[0069.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0c
	[0069.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.615] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGACCBAR.DPV", cAlternateFileName="")) returned 1
	[0069.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e10
	[0069.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.616] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb22, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGACCBAR.XML", cAlternateFileName="")) returned 1
	[0069.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e14
	[0069.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.616] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGACCBOX.DPV", cAlternateFileName="")) returned 1
	[0069.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.617] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e18
	[0069.617] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.617] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGACCBOX.XML", cAlternateFileName="")) returned 1
	[0069.617] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e1c
	[0069.618] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.618] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGAD.DPV", cAlternateFileName="")) returned 1
	[0069.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e20
	[0069.619] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.619] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGAD.XML", cAlternateFileName="")) returned 1
	[0069.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e24
	[0069.619] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.619] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5269, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGATNGET.DPV", cAlternateFileName="")) returned 1
	[0069.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e28
	[0069.620] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.621] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x145a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGATNGET.XML", cAlternateFileName="")) returned 1
	[0069.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e2c
	[0069.621] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.622] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGBARBLL.DPV", cAlternateFileName="")) returned 1
	[0069.622] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e30
	[0069.622] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.623] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc3bb225, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc702687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x456, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGBARBLL.XML", cAlternateFileName="")) returned 1
	[0069.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e34
	[0069.623] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.624] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGBORDER.DPV", cAlternateFileName="")) returned 1
	[0069.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e38
	[0069.624] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.625] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGBORDER.XML", cAlternateFileName="")) returned 1
	[0069.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e3c
	[0069.625] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.626] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGBOXES.DPV", cAlternateFileName="")) returned 1
	[0069.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e40
	[0069.627] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.627] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGBOXES.XML", cAlternateFileName="")) returned 1
	[0069.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e44
	[0069.628] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.628] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35468, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCAL.DPV", cAlternateFileName="")) returned 1
	[0069.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e48
	[0069.629] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.629] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc702687, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc702687, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCAL.XML", cAlternateFileName="")) returned 1
	[0069.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e4c
	[0069.630] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.630] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21994fc3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCHKBRD.DPV", cAlternateFileName="")) returned 1
	[0069.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e50
	[0069.631] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.631] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc68ff65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc68ff65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc702687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCHKBRD.XML", cAlternateFileName="")) returned 1
	[0069.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e54
	[0069.632] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.700] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc68ff65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc68ff65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCINFO.XML", cAlternateFileName="")) returned 1
	[0069.701] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e58
	[0069.701] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.701] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21994fc3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21994fc3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6082, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCOUPON.DPV", cAlternateFileName="")) returned 1
	[0069.702] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e5c
	[0069.703] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.703] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGCOUPON.XML", cAlternateFileName="")) returned 1
	[0069.703] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e60
	[0069.703] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.704] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGDOTS.DPV", cAlternateFileName="")) returned 1
	[0069.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e64
	[0069.704] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.704] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGDOTS.XML", cAlternateFileName="")) returned 1
	[0069.704] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e68
	[0069.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.705] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGHEADING.XML", cAlternateFileName="DGHEAD~1.XML")) returned 1
	[0069.705] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e6c
	[0069.705] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.706] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGLINACC.DPV", cAlternateFileName="")) returned 1
	[0069.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e70
	[0069.706] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.706] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGLINACC.XML", cAlternateFileName="")) returned 1
	[0069.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e74
	[0069.707] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.707] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ebf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGLOGO.DPV", cAlternateFileName="")) returned 1
	[0069.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e78
	[0069.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.708] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGLOGO.XML", cAlternateFileName="")) returned 1
	[0069.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e7c
	[0069.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.708] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe39, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGMAIN.XML", cAlternateFileName="")) returned 1
	[0069.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e80
	[0069.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.709] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGMARQ.DPV", cAlternateFileName="")) returned 1
	[0069.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e84
	[0069.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.710] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGMARQ.XML", cAlternateFileName="")) returned 1
	[0069.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e88
	[0069.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.711] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50f94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGMASTHD.DPV", cAlternateFileName="")) returned 1
	[0069.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e8c
	[0069.711] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.711] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x219bb1e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x219bb1e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x219bb1e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGNAVBAR.DPV", cAlternateFileName="")) returned 1
	[0069.711] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e90
	[0069.712] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.712] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGNAVBAR.XML", cAlternateFileName="")) returned 1
	[0069.712] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e94
	[0069.713] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.713] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eeda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGPICCAP.DPV", cAlternateFileName="")) returned 1
	[0069.713] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e98
	[0069.713] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.713] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1aca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGPICCAP.XML", cAlternateFileName="")) returned 1
	[0069.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e9c
	[0069.714] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.714] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGPQUOT.DPV", cAlternateFileName="")) returned 1
	[0069.714] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ea0
	[0069.715] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.715] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGPQUOT.XML", cAlternateFileName="")) returned 1
	[0069.715] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ea4
	[0069.715] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.716] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGPUNCT.DPV", cAlternateFileName="")) returned 1
	[0069.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ea8
	[0069.716] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.716] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGPUNCT.XML", cAlternateFileName="")) returned 1
	[0069.716] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4eac
	[0069.717] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.717] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e87, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGREPFRM.DPV", cAlternateFileName="")) returned 1
	[0069.717] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4eb0
	[0069.718] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.718] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGREPFRM.XML", cAlternateFileName="")) returned 1
	[0069.718] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4eb4
	[0069.718] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.719] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae41, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGSIDEBR.DPV", cAlternateFileName="")) returned 1
	[0069.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4eb8
	[0069.719] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.719] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGSIDEBR.XML", cAlternateFileName="")) returned 1
	[0069.719] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ebc
	[0069.720] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.720] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGSIDEBRV.XML", cAlternateFileName="DGSIDE~1.XML")) returned 1
	[0069.720] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec0
	[0069.721] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.721] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGSTORY.XML", cAlternateFileName="")) returned 1
	[0069.721] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec4
	[0069.721] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.722] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGSTORYVERT.XML", cAlternateFileName="DGSTOR~1.XML")) returned 1
	[0069.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec8
	[0069.722] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.722] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGTEAR.DPV", cAlternateFileName="")) returned 1
	[0069.722] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ecc
	[0069.723] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.723] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bab08a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bab08a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe50e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGTOC.DPV", cAlternateFileName="")) returned 1
	[0069.723] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ed0
	[0069.724] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.724] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1712, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGTOC.XML", cAlternateFileName="")) returned 1
	[0069.724] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ed4
	[0069.724] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.725] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBAD.XML", cAlternateFileName="")) returned 1
	[0069.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ed8
	[0069.725] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.725] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBBTN.DPV", cAlternateFileName="")) returned 1
	[0069.725] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4edc
	[0069.726] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.727] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x110e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBBTN.XML", cAlternateFileName="")) returned 1
	[0069.727] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ee0
	[0069.728] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.728] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x301be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBCAL.DPV", cAlternateFileName="")) returned 1
	[0069.729] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ee4
	[0069.729] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.730] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBCAL.XML", cAlternateFileName="")) returned 1
	[0069.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ee8
	[0069.730] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.730] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a2da43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a2da43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bab08a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f814, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBHD.DPV", cAlternateFileName="")) returned 1
	[0069.730] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4eec
	[0069.731] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.731] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1dbc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBHD.XML", cAlternateFileName="")) returned 1
	[0069.731] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ef0
	[0069.731] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.732] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21bf74fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21bf74fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21bf74fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBPQT.DPV", cAlternateFileName="")) returned 1
	[0069.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ef4
	[0069.732] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.732] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBPQT.XML", cAlternateFileName="")) returned 1
	[0069.732] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ef8
	[0069.733] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.733] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x220, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBREF.XML", cAlternateFileName="")) returned 1
	[0069.733] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4efc
	[0069.734] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.734] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBSBR.DPV", cAlternateFileName="")) returned 1
	[0069.734] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f00
	[0069.734] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.735] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGWEBSBR.XML", cAlternateFileName="")) returned 1
	[0069.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f04
	[0069.735] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.735] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGZIP.DPV", cAlternateFileName="")) returned 1
	[0069.735] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f08
	[0069.736] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.736] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGZIPC.XML", cAlternateFileName="")) returned 1
	[0069.736] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f0c
	[0069.737] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.737] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOTS.POC", cAlternateFileName="")) returned 1
	[0069.737] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f10
	[0069.737] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.738] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DVDHM.POC", cAlternateFileName="")) returned 1
	[0069.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f14
	[0069.738] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.738] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a53b55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7dc55, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EMAIL.DPV", cAlternateFileName="")) returned 1
	[0069.738] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f18
	[0069.739] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.739] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd066, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EMAIL.XML", cAlternateFileName="")) returned 1
	[0069.739] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f1c
	[0069.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.740] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a53b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a53b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EMAIL11.POC", cAlternateFileName="")) returned 1
	[0069.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f20
	[0069.740] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.740] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b127d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b127d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EMAILMOD.POC", cAlternateFileName="")) returned 1
	[0069.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f24
	[0069.741] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.741] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENV11.POC", cAlternateFileName="")) returned 1
	[0069.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f28
	[0069.845] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.845] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a052, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENV98.POC", cAlternateFileName="")) returned 1
	[0069.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f2c
	[0069.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.846] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4af4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENV98SP.POC", cAlternateFileName="")) returned 1
	[0069.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f30
	[0069.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.847] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24efb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENVELOPE.DPV", cAlternateFileName="")) returned 1
	[0069.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f34
	[0069.847] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.847] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENVELOPE.XML", cAlternateFileName="")) returned 1
	[0069.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f38
	[0069.848] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.848] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENVHM.POC", cAlternateFileName="")) returned 1
	[0069.848] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f3c
	[0069.849] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.849] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FEZIP.POC", cAlternateFileName="")) returned 1
	[0069.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f40
	[0069.849] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.849] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21a79da4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21a79da4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21a79da4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLY98SP.POC", cAlternateFileName="")) returned 1
	[0069.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f44
	[0069.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.850] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15369c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLYER.DPV", cAlternateFileName="")) returned 1
	[0069.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f48
	[0069.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.851] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13d7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLYER.XML", cAlternateFileName="")) returned 1
	[0069.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f4c
	[0069.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.852] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b38968, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x369a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLYER11.POC", cAlternateFileName="")) returned 1
	[0069.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f50
	[0069.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.853] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe498e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLYER98.POC", cAlternateFileName="")) returned 1
	[0069.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f54
	[0069.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.853] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd988, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FLYERHM.POC", cAlternateFileName="")) returned 1
	[0069.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f58
	[0069.854] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.854] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FOLDPROJ.DPV", cAlternateFileName="")) returned 1
	[0069.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f5c
	[0069.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.855] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FOLDPROJ.XML", cAlternateFileName="")) returned 1
	[0069.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f60
	[0069.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.856] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b38968, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b38968, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c952, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FORM98.POC", cAlternateFileName="")) returned 1
	[0069.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f64
	[0069.856] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.856] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FORMCTL.POC", cAlternateFileName="")) returned 1
	[0069.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f68
	[0069.857] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.857] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b5ebb7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FS3BOX.POC", cAlternateFileName="")) returned 1
	[0069.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f6c
	[0069.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.859] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b84e38, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b84e38, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIFT.DPV", cAlternateFileName="")) returned 1
	[0069.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f70
	[0069.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.860] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b84e38, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b84e38, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIFT.XML", cAlternateFileName="")) returned 1
	[0069.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f74
	[0069.860] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.860] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b84e38, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b84e38, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22cf4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIFT98.POC", cAlternateFileName="")) returned 1
	[0069.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f78
	[0069.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.861] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21b84e38, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6314, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GREET11.POC", cAlternateFileName="")) returned 1
	[0069.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f7c
	[0069.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.862] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21b5ebb7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21b5ebb7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124b3b7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GREETING.DPV", cAlternateFileName="")) returned 1
	[0069.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f80
	[0069.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.862] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb0c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GREETING.XML", cAlternateFileName="")) returned 1
	[0069.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f84
	[0069.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.863] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2293a966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2293a966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HEADINGBB.DPV", cAlternateFileName="HEADIN~1.DPV")) returned 1
	[0069.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f88
	[0069.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.864] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21d4ea61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21d4ea61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2293a966, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HEADINGBB.POC", cAlternateFileName="HEADIN~1.POC")) returned 1
	[0069.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f8c
	[0069.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.865] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21d4ea61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x21d4ea61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233f5084, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3cbaf6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INVITE.DPV", cAlternateFileName="")) returned 1
	[0069.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f90
	[0069.865] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.865] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INVITE.XML", cAlternateFileName="")) returned 1
	[0069.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f94
	[0069.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.866] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22986bc2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22986bc2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22986bc2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc448, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INVITE11.POC", cAlternateFileName="")) returned 1
	[0069.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f98
	[0069.867] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.867] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22b5084f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22b5084f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22ca7e1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a1ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LABEL.DPV", cAlternateFileName="")) returned 1
	[0069.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f9c
	[0069.868] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.868] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LABEL.XML", cAlternateFileName="")) returned 1
	[0069.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fa0
	[0069.869] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.869] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27842, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LABEL98.POC", cAlternateFileName="")) returned 1
	[0069.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fa4
	[0069.869] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.870] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3464, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LABELHM.POC", cAlternateFileName="")) returned 1
	[0069.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fa8
	[0069.870] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.871] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22ca7e1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22ca7e1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f89d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LETTHEAD.DPV", cAlternateFileName="")) returned 1
	[0069.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fac
	[0069.871] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.871] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22ca7e1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22ca7e1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x309e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LETTHEAD.XML", cAlternateFileName="")) returned 1
	[0069.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fb0
	[0069.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.872] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230153e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230153e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LINEACT.POC", cAlternateFileName="")) returned 1
	[0069.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fb4
	[0069.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.873] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22ca7e1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22ca7e1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb026, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LOGO98.POC", cAlternateFileName="")) returned 1
	[0069.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fb8
	[0069.873] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.873] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233a8be5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233a8be5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233a8be5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTHD11.POC", cAlternateFileName="")) returned 1
	[0069.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fbc
	[0069.874] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.874] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230153e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230153e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2383c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTHD98.POC", cAlternateFileName="")) returned 1
	[0069.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc0
	[0069.875] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.875] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230153e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230153e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTHD98SP.POC", cAlternateFileName="")) returned 1
	[0069.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc4
	[0069.875] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.876] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230ade29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230ade29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTHDHM.POC", cAlternateFileName="")) returned 1
	[0069.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc8
	[0069.876] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.876] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc74eab3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc74eab3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc74eab3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2694, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAIN.XML", cAlternateFileName="")) returned 1
	[0069.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fcc
	[0069.877] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.877] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x230ade29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x230ade29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2327797c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe56, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MARQUEE.POC", cAlternateFileName="")) returned 1
	[0069.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fd0
	[0069.878] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.878] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14a14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MENU.DPV", cAlternateFileName="")) returned 1
	[0069.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fd4
	[0069.878] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.879] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2322b4da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MENU.XML", cAlternateFileName="")) returned 1
	[0069.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fd8
	[0069.879] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.879] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2335c7ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2335c7ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2335c7ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MENU98.POC", cAlternateFileName="")) returned 1
	[0069.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fdc
	[0069.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.880] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208fa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSTHED98.POC", cAlternateFileName="")) returned 1
	[0069.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fe0
	[0069.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.881] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23382990, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NAVBAR11.POC", cAlternateFileName="")) returned 1
	[0069.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fe4
	[0069.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0069.882] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233a8be5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccde, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NAVBARV.POC", cAlternateFileName="")) returned 1
	[0069.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0069.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fe8
	[0069.882] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.124] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x230ade29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NAVBRPH1.POC", cAlternateFileName="")) returned 1
	[0070.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fec
	[0070.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.125] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2303b5cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2303b5cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2303b5cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x396, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NAVBRPH2.POC", cAlternateFileName="")) returned 1
	[0070.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ff0
	[0070.126] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.126] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233a8be5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9965a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NEWS.DPV", cAlternateFileName="")) returned 1
	[0070.127] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ff4
	[0070.128] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.128] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2335c7ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2335c7ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2335c7ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NEWS.XML", cAlternateFileName="")) returned 1
	[0070.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ff8
	[0070.128] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.129] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23205288, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23205288, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2335c7ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87d24, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NEWS11.POC", cAlternateFileName="")) returned 1
	[0070.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ffc
	[0070.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.129] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23336629, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23336629, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dc320, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NEWS98.POC", cAlternateFileName="")) returned 1
	[0070.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5004
	[0070.130] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.130] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23382990, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23382990, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5166c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NEWSHM.POC", cAlternateFileName="")) returned 1
	[0070.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5008
	[0070.131] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.131] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x241382dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ORIG98.POC", cAlternateFileName="")) returned 1
	[0070.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x500c
	[0070.131] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.132] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233a8be5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233a8be5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PICCAP98.POC", cAlternateFileName="")) returned 1
	[0070.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5010
	[0070.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.133] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x237626b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x237626b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2378891a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PICSTYLES.DPV", cAlternateFileName="PICSTY~1.DPV")) returned 1
	[0070.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5014
	[0070.133] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.134] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23441541, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23441541, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PICTPH.POC", cAlternateFileName="")) returned 1
	[0070.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5018
	[0070.134] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.134] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23716220, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23716220, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2373c469, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1722, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PNCTUATE.POC", cAlternateFileName="")) returned 1
	[0070.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x501c
	[0070.135] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.135] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb9b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POST98SP.POC", cAlternateFileName="")) returned 1
	[0070.135] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.135] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5020
	[0070.136] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.136] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233a8be5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233a8be5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa194b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTCARD.DPV", cAlternateFileName="")) returned 1
	[0070.136] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.136] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5024
	[0070.136] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.137] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTCARD.XML", cAlternateFileName="")) returned 1
	[0070.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.137] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5028
	[0070.137] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.137] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2341b2ec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2341b2ec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2407a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTCD11.POC", cAlternateFileName="")) returned 1
	[0070.137] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x502c
	[0070.138] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.138] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa84e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POSTCD98.POC", cAlternateFileName="")) returned 1
	[0070.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.138] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5030
	[0070.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.139] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf86, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROG98.POC", cAlternateFileName="")) returned 1
	[0070.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5034
	[0070.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.140] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2341b2ec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2341b2ec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROGRAM.DPV", cAlternateFileName="")) returned 1
	[0070.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5038
	[0070.140] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.140] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROGRAM.XML", cAlternateFileName="")) returned 1
	[0070.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x503c
	[0070.141] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.141] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2341b2ec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x934, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PS10TARG.POC", cAlternateFileName="")) returned 1
	[0070.141] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.141] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5040
	[0070.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.142] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233cee41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233cee41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x233cee41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PS2SWOOS.POC", cAlternateFileName="")) returned 1
	[0070.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5044
	[0070.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.143] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23467797, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23467797, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PS9CRNRH.POC", cAlternateFileName="")) returned 1
	[0070.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5048
	[0070.143] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.143] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23441541, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23441541, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PULLQUOTEBB.DPV", cAlternateFileName="PULLQU~1.DPV")) returned 1
	[0070.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x504c
	[0070.144] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.144] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23441541, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23441541, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PULLQUOTEBB.POC", cAlternateFileName="PULLQU~1.POC")) returned 1
	[0070.144] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5050
	[0070.145] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.145] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23441541, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23441541, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PULQOT98.POC", cAlternateFileName="")) returned 1
	[0070.145] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5054
	[0070.145] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.146] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x233f5084, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x233f5084, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23441541, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d1db, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QP.DPV", cAlternateFileName="")) returned 1
	[0070.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5058
	[0070.146] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.146] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23441541, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23441541, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23441541, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QP.XML", cAlternateFileName="")) returned 1
	[0070.146] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x505c
	[0070.147] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.147] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2341b2ec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2341b2ec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f882, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QUIKPUBS.POC", cAlternateFileName="")) returned 1
	[0070.147] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5060
	[0070.148] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.148] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23467797, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23467797, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x235000fc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d57e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REPTWIZ.POC", cAlternateFileName="")) returned 1
	[0070.148] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5064
	[0070.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.149] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23467797, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23467797, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5df4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RES98.POC", cAlternateFileName="")) returned 1
	[0070.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5068
	[0070.150] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.150] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23467797, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23467797, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1effa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RESP98.POC", cAlternateFileName="")) returned 1
	[0070.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x506c
	[0070.151] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.151] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23467797, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23467797, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RESUME.DPV", cAlternateFileName="")) returned 1
	[0070.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5070
	[0070.151] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.152] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23467797, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23467797, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23467797, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RESUME.XML", cAlternateFileName="")) returned 1
	[0070.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.152] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5074
	[0070.152] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.152] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2373c469, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RSPMECH.POC", cAlternateFileName="")) returned 1
	[0070.152] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5078
	[0070.153] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.153] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIDBAR98.POC", cAlternateFileName="")) returned 1
	[0070.153] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.153] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x507c
	[0070.154] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.154] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23598a6d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23598a6d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIDEBARBB.DPV", cAlternateFileName="SIDEBA~2.DPV")) returned 1
	[0070.155] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5080
	[0070.155] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.155] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23598a6d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23598a6d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2373c469, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb08a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIDEBARBB.POC", cAlternateFileName="SIDEBA~2.POC")) returned 1
	[0070.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5084
	[0070.156] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.156] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2373c469, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49e01, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIDEBARVERTBB.DPV", cAlternateFileName="SIDEBA~1.DPV")) returned 1
	[0070.156] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5088
	[0070.157] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.157] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa71a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIDEBARVERTBB.POC", cAlternateFileName="SIDEBA~1.POC")) returned 1
	[0070.157] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x508c
	[0070.158] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.158] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e95, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGN.DPV", cAlternateFileName="")) returned 1
	[0070.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5090
	[0070.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.159] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGN.XML", cAlternateFileName="")) returned 1
	[0070.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5094
	[0070.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.160] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGN98.POC", cAlternateFileName="")) returned 1
	[0070.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5098
	[0070.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.160] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23598a6d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23598a6d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SIGNHM.POC", cAlternateFileName="")) returned 1
	[0070.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x509c
	[0070.161] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.161] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x235000fc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SNIPE.POC", cAlternateFileName="")) returned 1
	[0070.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50a0
	[0070.162] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.162] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x234d9efd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x234d9efd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2373c469, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f93b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STORYBB.DPV", cAlternateFileName="")) returned 1
	[0070.162] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.162] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50a4
	[0070.162] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.163] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2354c5c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d36, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STORYBB.POC", cAlternateFileName="")) returned 1
	[0070.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.163] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50a8
	[0070.163] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.163] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c9a2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STORYVERTBB.DPV", cAlternateFileName="STORYV~1.DPV")) returned 1
	[0070.163] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50ac
	[0070.217] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.217] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STORYVERTBB.POC", cAlternateFileName="STORYV~1.POC")) returned 1
	[0070.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50b0
	[0070.218] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.218] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STRBRST.POC", cAlternateFileName="")) returned 1
	[0070.218] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50b4
	[0070.218] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.218] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TEAROFF.POC", cAlternateFileName="")) returned 1
	[0070.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50b8
	[0070.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.219] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x40a0a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TOC98.POC", cAlternateFileName="")) returned 1
	[0070.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50bc
	[0070.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.220] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x235000fc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x235000fc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23526361, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WCOMP98.POC", cAlternateFileName="")) returned 1
	[0070.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c0
	[0070.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.220] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2354c5c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x166484, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEB11.POC", cAlternateFileName="")) returned 1
	[0070.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c4
	[0070.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.221] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2354c5c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBCALSO.POC", cAlternateFileName="")) returned 1
	[0070.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c8
	[0070.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.222] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2354c5c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBEMAIL.POC", cAlternateFileName="")) returned 1
	[0070.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50cc
	[0070.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.222] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23526361, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23526361, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2354c5c9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12a02, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBHED98.POC", cAlternateFileName="")) returned 1
	[0070.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50d0
	[0070.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.223] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23572815, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23572815, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBHOME.POC", cAlternateFileName="")) returned 1
	[0070.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50d4
	[0070.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.224] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23572815, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23572815, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBLINK.POC", cAlternateFileName="")) returned 1
	[0070.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50d8
	[0070.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.224] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2354c5c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2354c5c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfeb9a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBPAGE.DPV", cAlternateFileName="")) returned 1
	[0070.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50dc
	[0070.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.225] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23572815, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23572815, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d6a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WEBPAGE.XML", cAlternateFileName="")) returned 1
	[0070.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50e0
	[0070.226] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.226] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2354c5c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2354c5c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WITHCOMP.DPV", cAlternateFileName="")) returned 1
	[0070.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50e4
	[0070.226] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.227] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2354c5c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2354c5c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1716, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WITHCOMP.XML", cAlternateFileName="")) returned 1
	[0070.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50e8
	[0070.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.227] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2354c5c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2354c5c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79e6b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WORDREP.DPV", cAlternateFileName="")) returned 1
	[0070.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50ec
	[0070.228] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.228] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23598a6d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23598a6d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1854, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WORDREP.XML", cAlternateFileName="")) returned 1
	[0070.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50f0
	[0070.229] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.229] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23572815, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23572815, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dd6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPULQT98.POC", cAlternateFileName="")) returned 1
	[0070.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50f4
	[0070.229] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.229] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23572815, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23572815, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 1
	[0070.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50f8
	[0070.230] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.230] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23572815, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23572815, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31d6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WSIDBR98.POC", cAlternateFileName="")) returned 0
	[0070.230] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0070.231] SetLastError (dwErrCode=0x0) 
	[0070.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.233] GetLastError () returned 0x5
	[0070.233] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.233] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.233] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="QUERIES", cAlternateFileName="")) returned 1
	[0070.233] SetLastError (dwErrCode=0x0) 
	[0070.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.234] GetLastError () returned 0x5
	[0070.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0070.234] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.234] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0070.234] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0070.234] SetLastError (dwErrCode=0x0) 
	[0070.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\QUERIES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\queries\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.234] GetLastError () returned 0x5
	[0070.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.234] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd71a51a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd71a51a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="rdpqoemetrics.dll", cAlternateFileName="RDPQOE~1.DLL")) returned 1
	[0070.234] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a50, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1
	[0070.234] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="REFEDIT.DLL", cAlternateFileName="")) returned 1
	[0070.234] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a900, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="REMINDER.WAV", cAlternateFileName="")) returned 1
	[0070.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc8
	[0070.235] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.235] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0070.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50fc
	[0070.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.236] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x353f7, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="RSWOP.ICM", cAlternateFileName="")) returned 1
	[0070.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5100
	[0070.237] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd5c3007, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdecdccb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf2ac886, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x377cb8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Rtmcodecs.dll", cAlternateFileName="RTMCOD~1.DLL")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd7406da, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdee5a425, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe44d0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Rtmmediamanager.dll", cAlternateFileName="RTMMED~1.DLL")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdee341d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdee5a425, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Rtmmvras.dll", cAlternateFileName="")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd7406da, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdab0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="rtmmvrcs.dll", cAlternateFileName="")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="rtmmvrhw.dll", cAlternateFileName="")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd7406da, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Rtmmvrsplitter.dll", cAlternateFileName="RTMMVR~1.DLL")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7d90de, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdee341d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf2866d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1584a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Rtmpal.dll", cAlternateFileName="")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd8bdf22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd8bdf22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf2866d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8582b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="RTMPLTFM.dll", cAlternateFileName="")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x568c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="rtmvc1decmft.dll", cAlternateFileName="RTMVC1~1.DLL")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAEXT.DLL", cAlternateFileName="")) returned 1
	[0070.237] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAMPLES", cAlternateFileName="")) returned 1
	[0070.237] SetLastError (dwErrCode=0x0) 
	[0070.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.237] GetLastError () returned 0x5
	[0070.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.237] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0070.238] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.238] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 1
	[0070.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5108
	[0070.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.238] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SOLVSAMP.XLS", cAlternateFileName="")) returned 0
	[0070.239] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0070.239] SetLastError (dwErrCode=0x0) 
	[0070.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.239] GetLastError () returned 0x5
	[0070.239] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.239] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8aa50, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3ea6336, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x278e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAVWBHF.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e9c9a8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42ed0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAVWBRAS.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x406d0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAVWBVML.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x410878a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2ac70, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SAVWBXAML.DLL", cAlternateFileName="SAVWBX~1.DLL")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SCANPST.EXE", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="scdec.dll", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1bcd2cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1bcd2cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee6030d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91290, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SCNPST32.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2495d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee2e1f46, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x918f8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SCNPST64.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee0cbdbe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee295a70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc2c98, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SCNPST64C.DLL", cAlternateFileName="SCNPST~1.DLL")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe274684a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x66e70, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SELFCERT.EXE", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72b8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SENDTO.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17cc0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SEQCHK10.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1de33ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe231a70f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SETLANG.EXE", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5015594, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x253ea8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SG.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5015594, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x54ca8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SHAPNUM.DLL", cAlternateFileName="")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x708b8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SHAREPOINTPROVIDER.DLL", cAlternateFileName="SHAREP~1.DLL")) returned 1
	[0070.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3658, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SignalRClient.dll", cAlternateFileName="SIGNAL~1.DLL")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bad8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SOA.DLL", cAlternateFileName="")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb4af440, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ec60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SOCIALCONNECTOR.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc080, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SOCIALPROVIDER.DLL", cAlternateFileName="SOCIAL~2.DLL")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5015594, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50cc0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="SOLUTILS.DLL", cAlternateFileName="")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd9c8eec, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd9c8eec, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd9ef125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x254c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ssscreenvvs.dll", cAlternateFileName="SSSCRE~1.DLL")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="STARTUP", cAlternateFileName="")) returned 1
	[0070.240] SetLastError (dwErrCode=0x0) 
	[0070.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.240] GetLastError () returned 0x5
	[0070.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.240] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.240] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0070.240] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0070.240] SetLastError (dwErrCode=0x0) 
	[0070.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\STARTUP\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\startup\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.240] GetLastError () returned 0x5
	[0070.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.240] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x397278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d08, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="System.Windows.Controls.Theming.Toolkit.zip", cAlternateFileName="SYSTEM~1.ZIP")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd088, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Tec.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c98, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="TecProxy.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="TellMeRuntime.dll", cAlternateFileName="TELLME~1.DLL")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x162d0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="TextConversionModule.dll", cAlternateFileName="TEXTCO~1.DLL")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1732c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="TIMESOLN.DLL", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1729263, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1729263, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18a6a8a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32c60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="TLIMPT.EXE", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb4fb945, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21bab0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="tmpod.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1564d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x258fae8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Uc.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca829e1e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca829e1e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb4d5695, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x162448, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="UCAddin.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd102c2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf2d2ac8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf49c714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x920468, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="UccApi.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13b648, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="UcMapi.exe", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48a2a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Ucmp.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="upe.dll", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e070, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1
	[0070.241] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x50ade23, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VBS2EXCL.XSL", cAlternateFileName="")) returned 1
	[0070.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5104
	[0070.242] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.243] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x50ade23, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x189d, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VBS2WORD.XSL", cAlternateFileName="")) returned 1
	[0070.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x510c
	[0070.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.244] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831b012b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831b012b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x831d63af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0070.244] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x839e2315, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0070.244] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x44e8517, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1fca0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VIEWMODL.DLL", cAlternateFileName="")) returned 1
	[0070.244] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x529dd34, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xec7ac8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISBRGR.DLL", cAlternateFileName="")) returned 1
	[0070.245] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4429858, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x198b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISCOLOR.DLL", cAlternateFileName="")) returned 1
	[0070.245] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x9012db, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32848, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISDLGU.DLL", cAlternateFileName="")) returned 1
	[0070.245] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x522b72d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x248040, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISICON.EXE", cAlternateFileName="")) returned 1
	[0070.245] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Visio Content", cAlternateFileName="VISIOC~1")) returned 1
	[0070.246] SetLastError (dwErrCode=0x0) 
	[0070.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.246] GetLastError () returned 0x5
	[0070.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0070.246] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0070.247] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.247] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0070.247] SetLastError (dwErrCode=0x0) 
	[0070.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.247] GetLastError () returned 0x5
	[0070.247] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0070.247] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0070.247] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0070.250] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0070.376] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48ee499, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x48ee499, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x48ee499, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x83bf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTDIR_M.VSTX", cAlternateFileName="ACTDIR~1.VST")) returned 1
	[0070.376] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5118
	[0070.377] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.377] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x82ee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTDIR_U.VSTX", cAlternateFileName="ACTDIR~2.VST")) returned 1
	[0070.377] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x511c
	[0070.378] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17938, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTUAL_FINISHDATES_GANTTCHART_M.VSTX", cAlternateFileName="ACTUAL~1.VST")) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1a328, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACTUAL_FINISHDATES_GANTTCHART_U.VSTX", cAlternateFileName="ACTUAL~2.VST")) returned 1
	[0070.378] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e76730, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e76730, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e76730, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2d03a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADO_M.VSSX", cAlternateFileName="ADO_M~1.VSS")) returned 1
	[0070.378] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.379] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5120
	[0070.379] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.379] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2b2ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADO_U.VSSX", cAlternateFileName="ADO_U~1.VSS")) returned 1
	[0070.379] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5124
	[0070.380] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.380] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e03f98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e03f98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e03f98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1479f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADS_M.VSSX", cAlternateFileName="ADS_M~1.VSS")) returned 1
	[0070.380] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5128
	[0070.381] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.381] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x137dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADS_U.VSSX", cAlternateFileName="ADS_U~1.VSS")) returned 1
	[0070.381] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x512c
	[0070.382] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.382] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3221d1a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3221d1a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3221d1a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ALARM_M.VSSX", cAlternateFileName="ALARM_~2.VSS")) returned 1
	[0070.382] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.383] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5130
	[0070.383] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.384] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xda04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ALARM_U.VSSX", cAlternateFileName="ALARM_~1.VSS")) returned 1
	[0070.384] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.384] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5134
	[0070.384] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.385] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16b6b75, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x16b6b75, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x16dce02, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1948d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ANNOT_M.VSSX", cAlternateFileName="ANNOT_~1.VSS")) returned 1
	[0070.385] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.385] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5138
	[0070.385] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.386] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f3541d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f3541d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f3541d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17322, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ANNOT_U.VSSX", cAlternateFileName="ANNOT_~2.VSS")) returned 1
	[0070.386] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.386] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x513c
	[0070.386] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.387] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x383ddaf, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x383ddaf, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x383ddaf, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPL_M.VSSX", cAlternateFileName="APPL_M~1.VSS")) returned 1
	[0070.387] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.387] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5140
	[0070.388] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.388] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2f4d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPL_U.VSSX", cAlternateFileName="APPL_U~1.VSS")) returned 1
	[0070.388] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.388] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5144
	[0070.389] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.389] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f00af3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2f00af3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2f00af3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x150d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPL_VISIO2013_M.VSSX", cAlternateFileName="APPL_V~2.VSS")) returned 1
	[0070.389] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.389] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5148
	[0070.390] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.390] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x297d49a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x297d49a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x297d49a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14cbf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="APPL_VISIO2013_U.VSSX", cAlternateFileName="APPL_V~1.VSS")) returned 1
	[0070.390] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.390] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x514c
	[0070.391] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.391] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xfd88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARROWS_M.VSSX", cAlternateFileName="ARROWS~2.VSS")) returned 1
	[0070.391] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.391] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5150
	[0070.392] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.392] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1264b79, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf340, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARROWS_U.VSSX", cAlternateFileName="ARROWS~1.VSS")) returned 1
	[0070.392] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.392] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5154
	[0070.393] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.393] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xeb27, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ASSOCIATIONS_UML_CLASS_M.VSTX", cAlternateFileName="ASSOCI~1.VST")) returned 1
	[0070.393] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.393] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5158
	[0070.394] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.394] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdf2a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ASSOCIATIONS_UML_CLASS_U.VSTX", cAlternateFileName="ASSOCI~2.VST")) returned 1
	[0070.394] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x515c
	[0070.395] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.395] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16dce02, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x16dce02, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1702fda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x165f7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_M.VSSX", cAlternateFileName="AUDIT_~1.VSS")) returned 1
	[0070.395] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5160
	[0070.396] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.396] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5004, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_M.VSTX", cAlternateFileName="AUDIT_~1.VST")) returned 1
	[0070.396] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.397] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5164
	[0070.397] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.397] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd0d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_SEVERAL_OUTCOMES_M.VSTX", cAlternateFileName="AUDIT_~2.VST")) returned 1
	[0070.397] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5168
	[0070.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.399] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xce63, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_SEVERAL_OUTCOMES_U.VSTX", cAlternateFileName="AUDIT_~3.VST")) returned 1
	[0070.399] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x516c
	[0070.399] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.400] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xeb65, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_SUBPROCESS_M.VSTX", cAlternateFileName="AUDIT_~4.VST")) returned 1
	[0070.400] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.400] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5170
	[0070.400] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.400] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49145b3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49145b3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49145b3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0dd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_SUBPROCESS_U.VSTX", cAlternateFileName="AU0DF1~1.VST")) returned 1
	[0070.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.401] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5174
	[0070.401] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.401] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x351cbc8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x351cbc8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x351cbc8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15838, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_U.VSSX", cAlternateFileName="AUDIT_~2.VSS")) returned 1
	[0070.401] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5178
	[0070.402] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.402] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4eeb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AUDIT_U.VSTX", cAlternateFileName="AUF87A~1.VST")) returned 1
	[0070.402] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x517c
	[0070.403] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.403] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1965688, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb841, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASFLO_M.VSSX", cAlternateFileName="BASFLO~1.VSS")) returned 1
	[0070.403] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.404] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5180
	[0070.404] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.404] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4abe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASFLO_M.VSTX", cAlternateFileName="BASFLO~1.VST")) returned 1
	[0070.404] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5184
	[0070.405] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.405] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b5ed86, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b5ed86, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3b5ed86, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb361, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASFLO_U.VSSX", cAlternateFileName="BASFLO~2.VSS")) returned 1
	[0070.466] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5188
	[0070.467] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.467] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4a13, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASFLO_U.VSTX", cAlternateFileName="BASFLO~2.VST")) returned 1
	[0070.467] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x518c
	[0070.468] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.468] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10844, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASICCIRCUIT_DIAGRAM_M.VSTX", cAlternateFileName="BASICC~1.VST")) returned 1
	[0070.468] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5190
	[0070.469] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.469] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10130, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASICCIRCUIT_DIAGRAM_U.VSTX", cAlternateFileName="BASICC~2.VST")) returned 1
	[0070.469] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.469] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5194
	[0070.470] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.470] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18ccc9d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x447e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASICD_M.VSTX", cAlternateFileName="BASICD~1.VST")) returned 1
	[0070.470] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.470] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5198
	[0070.471] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.471] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x16908c8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4409, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASICD_U.VSTX", cAlternateFileName="BASICD~2.VST")) returned 1
	[0070.471] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.471] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x519c
	[0070.472] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.472] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x132da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASICELECTRICAL_DIAGRAM_M.VSTX", cAlternateFileName="BASICE~1.VST")) returned 1
	[0070.472] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.472] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51a0
	[0070.473] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.473] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1217e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASICELECTRICAL_DIAGRAM_U.VSTX", cAlternateFileName="BASICE~2.VST")) returned 1
	[0070.473] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.473] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51a4
	[0070.473] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.474] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe69b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_AUDITDIAGRAM_M.VSTX", cAlternateFileName="BASIC_~1.VST")) returned 1
	[0070.474] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.474] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51a8
	[0070.474] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.475] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_AUDITDIAGRAM_U.VSTX", cAlternateFileName="BASIC_~2.VST")) returned 1
	[0070.475] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.475] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51ac
	[0070.475] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.476] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16881, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_GANTTCHART_M.VSTX", cAlternateFileName="BASIC_~3.VST")) returned 1
	[0070.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51b0
	[0070.476] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.477] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17ead, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_GANTTCHART_U.VSTX", cAlternateFileName="BASIC_~4.VST")) returned 1
	[0070.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.477] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51b4
	[0070.477] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.477] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x163aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_HOME_NETWORK_M.VSTX", cAlternateFileName="BA79E9~1.VST")) returned 1
	[0070.477] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51b8
	[0070.478] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.478] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x493a87e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x493a87e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x493a87e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15b47, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_HOME_NETWORK_U.VSTX", cAlternateFileName="BA3A7A~1.VST")) returned 1
	[0070.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51bc
	[0070.479] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.479] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a15d5c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2a15d5c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2a15d5c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1b1d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_M.VSSX", cAlternateFileName="BASIC_~2.VSS")) returned 1
	[0070.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c0
	[0070.480] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.480] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x19d14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_U.VSSX", cAlternateFileName="BASIC_~1.VSS")) returned 1
	[0070.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c4
	[0070.481] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.481] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4960aaf, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4960aaf, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4960aaf, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd8ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_UMLSEQUENCE_M.VSTX", cAlternateFileName="BA86FE~1.VST")) returned 1
	[0070.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c8
	[0070.482] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.482] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4960aaf, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4960aaf, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4960aaf, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xceea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASIC_UMLSEQUENCE_U.VSTX", cAlternateFileName="BA7B39~1.VST")) returned 1
	[0070.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.483] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51cc
	[0070.483] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.483] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c43bbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c43bbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c43bbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BA_DEC_M.VSSX", cAlternateFileName="BA_DEC~2.VSS")) returned 1
	[0070.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51d0
	[0070.484] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.484] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc568, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BA_DEC_U.VSSX", cAlternateFileName="BA_DEC~1.VSS")) returned 1
	[0070.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51d4
	[0070.485] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.485] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d1f09b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d1f09b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1d1f09b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8352, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BA_GRP_M.VSSX", cAlternateFileName="BA_GRP~2.VSS")) returned 1
	[0070.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51d8
	[0070.486] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.486] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1159842, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c37, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BA_GRP_U.VSSX", cAlternateFileName="BA_GRP~1.VSS")) returned 1
	[0070.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51dc
	[0070.487] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.487] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8663f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c8663f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c8663f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x23077, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCKGRN_M.VSSX", cAlternateFileName="BCKGRN~2.VSS")) returned 1
	[0070.487] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51e0
	[0070.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.488] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198b948, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x198b948, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2201f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BCKGRN_U.VSSX", cAlternateFileName="BCKGRN~1.VSS")) returned 1
	[0070.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51e4
	[0070.489] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.489] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3601957, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3601957, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3601957, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3878f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLDCOR_M.VSSX", cAlternateFileName="BLDCOR~3.VSS")) returned 1
	[0070.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51e8
	[0070.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.490] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x366d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLDCOR_U.VSSX", cAlternateFileName="BLDCOR~2.VSS")) returned 1
	[0070.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51ec
	[0070.491] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.491] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e9c9a8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e9c9a8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e9c9a8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x29afc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLDCOR_VISIO2013_M.VSSX", cAlternateFileName="BLDCOR~1.VSS")) returned 1
	[0070.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51f0
	[0070.492] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.493] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d4ec4f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d4ec4f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d4ec4f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x27bc6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLDCOR_VISIO2013_U.VSSX", cAlternateFileName="BLDCOR~4.VSS")) returned 1
	[0070.493] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.493] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51f4
	[0070.493] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.494] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x72a6d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLDGPLAN.DWG", cAlternateFileName="")) returned 1
	[0070.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.494] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51f8
	[0070.494] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.495] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd9ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLDGPLAN.JPG", cAlternateFileName="")) returned 1
	[0070.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51fc
	[0070.495] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.496] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3437c9a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3437c9a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3437c9a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1226f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCK3_M.VSSX", cAlternateFileName="BLOCK3~1.VSS")) returned 1
	[0070.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5200
	[0070.546] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.546] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3bf7740, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3bf7740, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3bf7740, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x110c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCK3_U.VSSX", cAlternateFileName="BLOCK3~2.VSS")) returned 1
	[0070.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5204
	[0070.547] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.547] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19d7f1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x19d7f1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1a24140, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14888, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCKP_M.VSSX", cAlternateFileName="BLOCKP~1.VSS")) returned 1
	[0070.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5208
	[0070.548] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.548] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x60af, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCKP_M.VSTX", cAlternateFileName="BLOCKP~1.VST")) returned 1
	[0070.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x520c
	[0070.548] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.548] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c6049a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c6049a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c6049a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13f09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCKP_U.VSSX", cAlternateFileName="BLOCKP~2.VSS")) returned 1
	[0070.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5210
	[0070.549] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.549] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5f13, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCKP_U.VSTX", cAlternateFileName="BLOCKP~2.VST")) returned 1
	[0070.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5214
	[0070.550] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.550] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf1d7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCKS.DWG", cAlternateFileName="")) returned 1
	[0070.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5218
	[0070.550] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.551] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e8e3f2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2e8e3f2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2e8e3f2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16720, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCK_M.VSSX", cAlternateFileName="BLOCK_~1.VSS")) returned 1
	[0070.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x521c
	[0070.551] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.551] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4fe1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCK_M.VSTX", cAlternateFileName="BLOCK_~1.VST")) returned 1
	[0070.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5220
	[0070.552] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.552] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x39951ab, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x39951ab, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x39951ab, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15739, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCK_U.VSSX", cAlternateFileName="BLOCK_~2.VSS")) returned 1
	[0070.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5224
	[0070.553] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.553] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4986ebe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4986ebe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4986ebe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4eef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLOCK_U.VSTX", cAlternateFileName="BLOCK_~2.VST")) returned 1
	[0070.553] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5228
	[0070.553] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.554] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c90082, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c90082, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c90082, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xfcdf, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BORDRS_M.VSSX", cAlternateFileName="BORDRS~2.VSS")) returned 1
	[0070.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x522c
	[0070.554] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.556] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c43bbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c43bbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c43bbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xfc52, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BORDRS_U.VSSX", cAlternateFileName="BORDRS~1.VSS")) returned 1
	[0070.556] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.556] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5230
	[0070.557] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.557] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2255e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX", cAlternateFileName="BPMN_A~1.VST")) returned 1
	[0070.557] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.557] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5234
	[0070.557] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.558] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x27905, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX", cAlternateFileName="BPMN_A~2.VST")) returned 1
	[0070.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5238
	[0070.558] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.558] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d4ec4f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d4ec4f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d74ea0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2ae6f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_M.VSSX", cAlternateFileName="BPMN_M~1.VSS")) returned 1
	[0070.558] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x523c
	[0070.559] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.559] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc73b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_M.VSTX", cAlternateFileName="BPMN_M~1.VST")) returned 1
	[0070.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5240
	[0070.560] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.560] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1b369, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_PROCESS_GATEWAY_M.VSTX", cAlternateFileName="BPMN_P~1.VST")) returned 1
	[0070.560] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5244
	[0070.560] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.561] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1aa7e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_PROCESS_GATEWAY_U.VSTX", cAlternateFileName="BPMN_P~2.VST")) returned 1
	[0070.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5248
	[0070.561] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.561] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x200fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX", cAlternateFileName="BPMN_P~3.VST")) returned 1
	[0070.561] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x524c
	[0070.562] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.562] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1f43f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX", cAlternateFileName="BPMN_P~4.VST")) returned 1
	[0070.562] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.562] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5250
	[0070.562] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.563] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x29937, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_U.VSSX", cAlternateFileName="BPMN_U~1.VSS")) returned 1
	[0070.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.563] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5254
	[0070.563] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.563] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc509, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPMN_U.VSTX", cAlternateFileName="BPMN_U~1.VST")) returned 1
	[0070.563] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5258
	[0070.564] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.564] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ba18c4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ba18c4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1bc7b4a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf668, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPRES_M.VSSX", cAlternateFileName="BPRES_~1.VSS")) returned 1
	[0070.564] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.564] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x525c
	[0070.564] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.565] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3bd14ac, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3bd14ac, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3bd14ac, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf2e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BPRES_U.VSSX", cAlternateFileName="BPRES_~2.VSS")) returned 1
	[0070.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5260
	[0070.565] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.565] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x559, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRAINSTM.XML", cAlternateFileName="")) returned 1
	[0070.565] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5264
	[0070.566] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.566] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x332cc84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x332cc84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x332cc84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6e16, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BSTORM_M.VSSX", cAlternateFileName="BSTORM~2.VSS")) returned 1
	[0070.566] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5268
	[0070.567] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.567] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6bf4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BSTORM_M.VSTX", cAlternateFileName="BSTORM~1.VST")) returned 1
	[0070.567] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x526c
	[0070.567] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.568] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x241fff6, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x241fff6, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x241fff6, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6d74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BSTORM_U.VSSX", cAlternateFileName="BSTORM~1.VSS")) returned 1
	[0070.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5270
	[0070.568] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.568] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6b35, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BSTORM_U.VSTX", cAlternateFileName="BSTORM~2.VST")) returned 1
	[0070.568] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5274
	[0070.569] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.569] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c1d957, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c1d957, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c1d957, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3230c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BTHKT_M.VSSX", cAlternateFileName="BTHKT_~3.VSS")) returned 1
	[0070.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5278
	[0070.570] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.570] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x339f393, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x339f393, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x339f393, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x31c38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BTHKT_U.VSSX", cAlternateFileName="BTHKT_~2.VSS")) returned 1
	[0070.570] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x527c
	[0070.571] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.571] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c69e3f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c69e3f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c69e3f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17e2a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BTHKT_VISIO2013_M.VSSX", cAlternateFileName="BTHKT_~4.VSS")) returned 1
	[0070.577] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5280
	[0070.578] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.578] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x153d6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BTHKT_VISIO2013_U.VSSX", cAlternateFileName="BTHKT_~1.VSS")) returned 1
	[0070.578] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5284
	[0070.579] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.579] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38fc84a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x38fc84a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x38fc84a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x203d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CABNT_M.VSSX", cAlternateFileName="CABNT_~4.VSS")) returned 1
	[0070.579] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5288
	[0070.580] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.580] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ba18c4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ba18c4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ba18c4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1f117, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CABNT_U.VSSX", cAlternateFileName="CABNT_~1.VSS")) returned 1
	[0070.580] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x528c
	[0070.580] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.581] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f3541d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f3541d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f3541d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x146a5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CABNT_VISIO2013_M.VSSX", cAlternateFileName="CABNT_~2.VSS")) returned 1
	[0070.581] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5290
	[0070.581] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.582] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x290acd1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x290acd1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2930e76, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13ddb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CABNT_VISIO2013_U.VSSX", cAlternateFileName="CABNT_~3.VSS")) returned 1
	[0070.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5294
	[0070.582] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.582] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23ad924, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x23ad924, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x23ad924, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1122a3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALNDR_M.VSSX", cAlternateFileName="CALNDR~2.VSS")) returned 1
	[0070.582] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5298
	[0070.583] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.583] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49acf59, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7d40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALNDR_M.VSTX", cAlternateFileName="CALNDR~1.VST")) returned 1
	[0070.583] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x529c
	[0070.584] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.584] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f0eea1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f0eea1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f0eea1, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x111de5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALNDR_U.VSSX", cAlternateFileName="CALNDR~1.VSS")) returned 1
	[0070.584] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52a0
	[0070.584] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.585] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49acf59, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49acf59, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7cfa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALNDR_U.VSTX", cAlternateFileName="CALNDR~2.VST")) returned 1
	[0070.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52a4
	[0070.585] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.585] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3437c9a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3437c9a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3437c9a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x166fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALOUT_M.VSSX", cAlternateFileName="CALOUT~1.VSS")) returned 1
	[0070.585] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52a8
	[0070.677] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.677] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37cb5a6, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x37cb5a6, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x37f171b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x155f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALOUT_U.VSSX", cAlternateFileName="CALOUT~2.VSS")) returned 1
	[0070.677] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52ac
	[0070.678] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.678] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x33eb904, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x33eb904, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x33eb904, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8bc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAUSEF_M.VSSX", cAlternateFileName="CAUSEF~2.VSS")) returned 1
	[0070.678] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52b0
	[0070.679] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.679] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6b9d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAUSEF_M.VSTX", cAlternateFileName="CAUSEF~1.VST")) returned 1
	[0070.679] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52b4
	[0070.681] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.681] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3163050, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3163050, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3163050, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x873a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAUSEF_U.VSSX", cAlternateFileName="CAUSEF~1.VSS")) returned 1
	[0070.681] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52b8
	[0070.682] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.682] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a64, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAUSEF_U.VSTX", cAlternateFileName="CAUSEF~2.VST")) returned 1
	[0070.682] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52bc
	[0070.682] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.683] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4ee1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CEILPL_M.VSTX", cAlternateFileName="CEILPL~1.VST")) returned 1
	[0070.683] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c0
	[0070.683] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.684] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4db4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CEILPL_U.VSTX", cAlternateFileName="CEILPL~2.VST")) returned 1
	[0070.684] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c4
	[0070.684] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.685] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x12f87, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CFF_HORIZONTAL_M.VSTX", cAlternateFileName="CFF_HO~1.VST")) returned 1
	[0070.685] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c8
	[0070.685] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.686] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11c50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CFF_HORIZONTAL_U.VSTX", cAlternateFileName="CFF_HO~2.VST")) returned 1
	[0070.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52cc
	[0070.686] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.686] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x132ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CFF_SHAREDPROCESS_M.VSTX", cAlternateFileName="CFF_SH~1.VST")) returned 1
	[0070.686] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52d0
	[0070.687] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.687] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x12764, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CFF_SHAREDPROCESS_U.VSTX", cAlternateFileName="CFF_SH~2.VST")) returned 1
	[0070.687] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52d4
	[0070.688] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.688] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x168ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CFF_VERTICAL_M.VSTX", cAlternateFileName="CFF_VE~1.VST")) returned 1
	[0070.688] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52d8
	[0070.689] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.689] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16042, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CFF_VERTICAL_U.VSTX", cAlternateFileName="CFF_VE~2.VST")) returned 1
	[0070.689] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52dc
	[0070.690] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.690] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f3541d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f3541d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f3541d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2274f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHART_M.VSSX", cAlternateFileName="CHART_~1.VSS")) returned 1
	[0070.690] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52e0
	[0070.691] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.691] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49d316e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49d316e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49d316e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x96af, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHART_M.VSTX", cAlternateFileName="CHART_~1.VST")) returned 1
	[0070.691] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52e4
	[0070.692] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.692] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x297d49a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x297d49a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x29a3769, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2056d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHART_U.VSSX", cAlternateFileName="CHART_~2.VSS")) returned 1
	[0070.692] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52e8
	[0070.693] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.693] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49f9415, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49f9415, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49f9415, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x9614, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHART_U.VSTX", cAlternateFileName="CHART_~2.VST")) returned 1
	[0070.693] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52ec
	[0070.694] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.694] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e8e3f2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2e8e3f2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2e8e3f2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc943, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMOLE_M.VSSX", cAlternateFileName="COMOLE~2.VSS")) returned 1
	[0070.694] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52f0
	[0070.695] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.698] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c5b962, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4cd5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMOLE_M.VSTX", cAlternateFileName="COMOLE~2.VST")) returned 1
	[0070.698] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52f4
	[0070.698] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.699] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x290acd1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x290acd1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2930e76, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc1c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMOLE_U.VSSX", cAlternateFileName="COMOLE~1.VSS")) returned 1
	[0070.699] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52f8
	[0070.699] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.700] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49f9415, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49f9415, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49f9415, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMOLE_U.VSTX", cAlternateFileName="COMOLE~1.VST")) returned 1
	[0070.700] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52fc
	[0070.700] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.701] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19fdec5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x19fdec5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1a4a3b4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd682, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPLN_M.VSSX", cAlternateFileName="COMPLN~1.VSS")) returned 1
	[0070.706] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5300
	[0070.707] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.707] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd595, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPLN_U.VSSX", cAlternateFileName="COMPLN~2.VSS")) returned 1
	[0070.707] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5304
	[0070.708] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.708] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x104d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPME_M.VSSX", cAlternateFileName="COMPME~2.VSS")) returned 1
	[0070.708] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5308
	[0070.709] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.709] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2f0f8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1b2f0f8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1b2f0f8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xfebb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPME_U.VSSX", cAlternateFileName="COMPME~1.VSS")) returned 1
	[0070.709] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x530c
	[0070.710] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.710] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x290acd1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x290acd1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2930e76, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2d930, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPS_M.VSSX", cAlternateFileName="COMPS_~2.VSS")) returned 1
	[0070.710] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5310
	[0070.753] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.753] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ba18c4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ba18c4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2b0f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPS_U.VSSX", cAlternateFileName="COMPS_~1.VSS")) returned 1
	[0070.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5314
	[0070.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.754] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c5b962, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11591, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONLOG_M.VSTX", cAlternateFileName="CONLOG~2.VST")) returned 1
	[0070.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5318
	[0070.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.755] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c5b962, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11596, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONLOG_U.VSTX", cAlternateFileName="CONLOG~1.VST")) returned 1
	[0070.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x531c
	[0070.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.756] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16dce02, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x16dce02, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1702fda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x250fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONNEC_M.VSSX", cAlternateFileName="CONNEC~1.VSS")) returned 1
	[0070.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5320
	[0070.756] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.756] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x33eb904, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x33eb904, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x33eb904, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x22dfd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONNEC_U.VSSX", cAlternateFileName="CONNEC~2.VSS")) returned 1
	[0070.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5324
	[0070.757] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.757] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c69e3f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c69e3f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c69e3f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x77bd5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CUBICL_M.VSSX", cAlternateFileName="CUBICL~4.VSS")) returned 1
	[0070.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5328
	[0070.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.758] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3352f3e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3352f3e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3352f3e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x73f11, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CUBICL_U.VSSX", cAlternateFileName="CUBICL~3.VSS")) returned 1
	[0070.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x532c
	[0070.759] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.759] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ba18c4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ba18c4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1bc7b4a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4326a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CUBICL_VISIO2013_M.VSSX", cAlternateFileName="CUBICL~2.VSS")) returned 1
	[0070.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5330
	[0070.760] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.760] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1abcabc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1abcabc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42edc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CUBICL_VISIO2013_U.VSSX", cAlternateFileName="CUBICL~1.VSS")) returned 1
	[0070.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5334
	[0070.761] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.761] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fe590a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2fe590a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2fe590a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe3e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATFLO_M.VSSX", cAlternateFileName="DATFLO~2.VSS")) returned 1
	[0070.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5338
	[0070.762] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.762] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c5b962, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4c89, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATFLO_M.VSTX", cAlternateFileName="DATFLO~2.VST")) returned 1
	[0070.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x533c
	[0070.763] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.763] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a24140, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a24140, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1a96a42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xddac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATFLO_U.VSSX", cAlternateFileName="DATFLO~1.VSS")) returned 1
	[0070.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5340
	[0070.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.764] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49f9415, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49f9415, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49f9415, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4b57, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATFLO_U.VSTX", cAlternateFileName="DATFLO~1.VST")) returned 1
	[0070.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5344
	[0070.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.765] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4ade205, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4ade205, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ade205, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x39a5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATMOD_M.VSTX", cAlternateFileName="DATMOD~2.VST")) returned 1
	[0070.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5348
	[0070.766] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.766] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x38d9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DATMOD_U.VSTX", cAlternateFileName="DATMOD~1.VST")) returned 1
	[0070.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x534c
	[0070.766] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.767] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3437c9a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3437c9a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3437c9a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x507f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCHEN_M.VSSX", cAlternateFileName="DBCHEN~2.VSS")) returned 1
	[0070.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5350
	[0070.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.768] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x51f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCHEN_M.VSTX", cAlternateFileName="DBCHEN~2.VST")) returned 1
	[0070.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5354
	[0070.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.769] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x33eb904, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x33eb904, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x33eb904, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4d55, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCHEN_U.VSSX", cAlternateFileName="DBCHEN~1.VSS")) returned 1
	[0070.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5358
	[0070.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.770] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCHEN_U.VSTX", cAlternateFileName="DBCHEN~1.VST")) returned 1
	[0070.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x535c
	[0070.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.771] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c43bbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c43bbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c43bbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6b48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCROW_M.VSSX", cAlternateFileName="DBCROW~2.VSS")) returned 1
	[0070.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5360
	[0070.771] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.772] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x595a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCROW_M.VSTX", cAlternateFileName="DBCROW~2.VST")) returned 1
	[0070.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5364
	[0070.772] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.773] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22c8a4e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x22c8a4e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x22c8a4e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x66f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCROW_U.VSSX", cAlternateFileName="DBCROW~1.VSS")) returned 1
	[0070.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5368
	[0070.774] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.775] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x57ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBCROW_U.VSTX", cAlternateFileName="DBCROW~1.VST")) returned 1
	[0070.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x536c
	[0070.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.776] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ee8cf4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ee8cf4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ee8cf4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x79e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBIDEF1X_M.VSSX", cAlternateFileName="DBIDEF~2.VSS")) returned 1
	[0070.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5370
	[0070.776] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.777] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6273, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBIDEF1X_M.VSTX", cAlternateFileName="DBIDEF~2.VST")) returned 1
	[0070.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5374
	[0070.777] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.778] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16b6b75, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x16b6b75, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x16dce02, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7557, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBIDEF1X_U.VSSX", cAlternateFileName="DBIDEF~1.VSS")) returned 1
	[0070.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5378
	[0070.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.778] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x49f9415, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x49f9415, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x49f9415, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x60a9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBIDEF1X_U.VSTX", cAlternateFileName="DBIDEF~1.VST")) returned 1
	[0070.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x537c
	[0070.779] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.779] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x193f5ad, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6c55, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBUML_M.VSSX", cAlternateFileName="DBUML_~1.VSS")) returned 1
	[0070.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5380
	[0070.780] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.780] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5e76, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBUML_M.VSTX", cAlternateFileName="DBUML_~2.VST")) returned 1
	[0070.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5384
	[0070.787] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.787] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6812, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBUML_U.VSSX", cAlternateFileName="DBUML_~2.VSS")) returned 1
	[0070.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5388
	[0070.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.788] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5c93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBUML_U.VSTX", cAlternateFileName="DBUML_~1.VST")) returned 1
	[0070.788] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x538c
	[0070.858] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.858] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x318a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DEPTORGCHART_M.VSTX", cAlternateFileName="DEPTOR~2.VST")) returned 1
	[0070.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5390
	[0070.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.859] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2c0ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DEPTORGCHART_U.VSTX", cAlternateFileName="DEPTOR~1.VST")) returned 1
	[0070.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5394
	[0070.860] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.860] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x28e4acd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x28e4acd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x28e4acd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe5cb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGICON_M.VSSX", cAlternateFileName="DGICON~1.VSS")) returned 1
	[0070.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5398
	[0070.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.861] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x318928f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x318928f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x318928f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe258, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DGICON_U.VSSX", cAlternateFileName="DGICON~2.VSS")) returned 1
	[0070.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x539c
	[0070.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.862] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1c698, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DIMARC_U.VSSX", cAlternateFileName="DIMARC~1.VSS")) returned 1
	[0070.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53a0
	[0070.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.863] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f81606, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f81606, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f81606, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1c558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DIMENG_M.VSSX", cAlternateFileName="DIMENG~1.VSS")) returned 1
	[0070.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53a4
	[0070.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.864] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x30ca74c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x30ca74c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x30ca74c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1b2c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DIMENG_U.VSSX", cAlternateFileName="DIMENG~2.VSS")) returned 1
	[0070.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53a8
	[0070.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.865] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x12296, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOCUMENT_APPROVAL_WORKFLOW_M.VSTX", cAlternateFileName="DOCUME~2.VST")) returned 1
	[0070.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53ac
	[0070.865] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.865] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11add, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DOCUMENT_APPROVAL_WORKFLOW_U.VSTX", cAlternateFileName="DOCUME~1.VST")) returned 1
	[0070.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53b0
	[0070.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.866] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x21e3c29, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x21e3c29, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x21e3c29, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x141c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRAWTL_M.VSSX", cAlternateFileName="DRAWTL~1.VSS")) returned 1
	[0070.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53b4
	[0070.867] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29a3769, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x29a3769, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x29a3769, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13707, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRAWTL_U.VSSX", cAlternateFileName="DRAWTL~2.VSS")) returned 1
	[0070.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53b8
	[0070.868] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.868] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ec2a6a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ec2a6a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ec2a6a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x59d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRILLD_M.VSSX", cAlternateFileName="DRILLD~2.VSS")) returned 1
	[0070.868] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53bc
	[0070.869] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.869] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb877, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRILLD_M.VSTX", cAlternateFileName="DRILLD~2.VST")) returned 1
	[0070.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c0
	[0070.870] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.870] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8663f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c8663f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c8663f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x595f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRILLD_U.VSSX", cAlternateFileName="DRILLD~1.VSS")) returned 1
	[0070.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c4
	[0070.870] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.871] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb823, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DRILLD_U.VSTX", cAlternateFileName="DRILLD~1.VST")) returned 1
	[0070.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c8
	[0070.871] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.871] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c3a235, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c3a235, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2faec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNET_M.VSSX", cAlternateFileName="DTLNET~1.VSS")) returned 1
	[0070.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53cc
	[0070.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.872] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbd16, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNET_M.VSTX", cAlternateFileName="DTLNET~2.VST")) returned 1
	[0070.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53d0
	[0070.873] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.873] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1fa7818, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1fa7818, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1fa7818, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2d656, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNET_U.VSSX", cAlternateFileName="DTLNET~2.VSS")) returned 1
	[0070.873] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53d4
	[0070.874] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.874] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbe37, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNET_U.VSTX", cAlternateFileName="DTLNET~1.VST")) returned 1
	[0070.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53d8
	[0070.874] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.874] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ba18c4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ba18c4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1bc7b4a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x168f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNME_M.VSSX", cAlternateFileName="DTLNME~2.VSS")) returned 1
	[0070.874] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53dc
	[0070.875] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.875] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5c02, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNME_M.VSTX", cAlternateFileName="DTLNME~1.VST")) returned 1
	[0070.875] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53e0
	[0070.876] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.876] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1abcabc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1abcabc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16084, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNME_U.VSSX", cAlternateFileName="DTLNME~1.VSS")) returned 1
	[0070.876] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53e4
	[0070.877] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.877] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5b7a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DTLNME_U.VSTX", cAlternateFileName="DTLNME~2.VST")) returned 1
	[0070.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53e8
	[0070.877] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.877] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2930e76, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2930e76, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x295718d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x402ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DVCALL_M.VSSX", cAlternateFileName="DVCALL~1.VSS")) returned 1
	[0070.877] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53ec
	[0070.878] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37a533b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x37a533b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x37a533b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3e89c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DVCALL_U.VSSX", cAlternateFileName="DVCALL~2.VSS")) returned 1
	[0070.878] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53f0
	[0070.879] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.879] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x283f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWGCNV_M.VSTX", cAlternateFileName="DWGCNV~2.VST")) returned 1
	[0070.879] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53f4
	[0070.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.880] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a1f7cc, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a1f7cc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a1f7cc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x26b22, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWGCNV_U.VSTX", cAlternateFileName="DWGCNV~1.VST")) returned 1
	[0070.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53f8
	[0070.880] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.880] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37a533b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x37a533b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x37a533b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2367a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EECHIP_M.VSSX", cAlternateFileName="EECHIP~2.VSS")) returned 1
	[0070.880] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53fc
	[0070.881] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.881] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a6bc7c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3e50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EECHIP_M.VSTX", cAlternateFileName="EECHIP~1.VST")) returned 1
	[0070.881] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5404
	[0070.882] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.882] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x30ca74c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x30ca74c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x30ca74c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x22254, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EECHIP_U.VSSX", cAlternateFileName="EECHIP~1.VSS")) returned 1
	[0070.882] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5408
	[0070.883] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.883] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a91d98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3e21, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EECHIP_U.VSTX", cAlternateFileName="EECHIP~2.VST")) returned 1
	[0070.889] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x540c
	[0070.890] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.890] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ec2a6a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ec2a6a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ee8cf4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17309, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EECOMP_M.VSSX", cAlternateFileName="EECOMP~2.VSS")) returned 1
	[0070.890] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5410
	[0070.891] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.891] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c8663f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c8663f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c8663f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x160fe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EECOMP_U.VSSX", cAlternateFileName="EECOMP~1.VSS")) returned 1
	[0070.891] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5414
	[0070.892] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.892] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f3541d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f3541d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f3541d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x39ee9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEFUND_M.VSSX", cAlternateFileName="EEFUND~2.VSS")) returned 1
	[0070.892] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5418
	[0070.893] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.893] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f5b39d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f5b39d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f5b39d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x39124, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEFUND_U.VSSX", cAlternateFileName="EEFUND~3.VSS")) returned 1
	[0070.893] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x541c
	[0070.894] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.894] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19d7f1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x19d7f1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x19fdec5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1fe37, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEFUND_VISIO2013_M.VSSX", cAlternateFileName="EEFUND~1.VSS")) returned 1
	[0070.894] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5420
	[0070.895] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.895] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38d65f7, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x38d65f7, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x38d65f7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1e894, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEFUND_VISIO2013_U.VSSX", cAlternateFileName="EEFUND~4.VSS")) returned 1
	[0070.895] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5424
	[0070.896] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.896] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a6bc7c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x46b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEGENR_M.VSTX", cAlternateFileName="EEGENR~1.VST")) returned 1
	[0070.896] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5428
	[0070.897] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.897] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a91d98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4266, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEGENR_U.VSTX", cAlternateFileName="EEGENR~2.VST")) returned 1
	[0070.898] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x542c
	[0070.974] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.974] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4ade205, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4ade205, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ade205, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3deb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEICS_M.VSTX", cAlternateFileName="EEICS_~2.VST")) returned 1
	[0070.974] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5430
	[0070.975] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.975] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a6bc7c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3c77, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEICS_U.VSTX", cAlternateFileName="EEICS_~1.VST")) returned 1
	[0070.975] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5434
	[0070.976] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.976] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3437c9a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3437c9a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3437c9a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x985b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEMAIN_M.VSSX", cAlternateFileName="EEMAIN~1.VSS")) returned 1
	[0070.976] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5438
	[0070.976] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.977] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d4ec4f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d4ec4f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d4ec4f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x94f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEMAIN_U.VSSX", cAlternateFileName="EEMAIN~2.VSS")) returned 1
	[0070.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x543c
	[0070.977] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.977] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x318928f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x318928f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x318928f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1ad74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEMAPS_M.VSSX", cAlternateFileName="EEMAPS~1.VSS")) returned 1
	[0070.977] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5440
	[0070.978] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.978] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3bd14ac, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3bd14ac, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3bd14ac, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1918f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEMAPS_U.VSSX", cAlternateFileName="EEMAPS~2.VSS")) returned 1
	[0070.978] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5444
	[0070.979] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.979] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ba18c4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ba18c4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe28d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEMECH_M.VSSX", cAlternateFileName="EEMECH~1.VSS")) returned 1
	[0070.979] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5448
	[0070.980] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.980] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f81606, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f81606, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f81606, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd530, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEMECH_U.VSSX", cAlternateFileName="EEMECH~2.VSS")) returned 1
	[0070.980] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x544c
	[0070.981] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.981] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1a96a42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15123, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEPATH_M.VSSX", cAlternateFileName="EEPATH~2.VSS")) returned 1
	[0070.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5450
	[0070.982] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.982] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1f3541d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1f3541d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1f3541d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14aa7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEPATH_U.VSSX", cAlternateFileName="EEPATH~3.VSS")) returned 1
	[0070.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5454
	[0070.983] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.983] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x32e07e4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x32e07e4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x32e07e4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xfe3b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEPATH_VISIO2013_M.VSSX", cAlternateFileName="EEPATH~4.VSS")) returned 1
	[0070.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5458
	[0070.984] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.984] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1729263, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf72f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEPATH_VISIO2013_U.VSSX", cAlternateFileName="EEPATH~1.VSS")) returned 1
	[0070.984] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x545c
	[0070.985] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.985] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ae2d07, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ae2d07, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ae2d07, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1294c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEQUAL_M.VSSX", cAlternateFileName="EEQUAL~1.VSS")) returned 1
	[0070.985] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5460
	[0070.986] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.986] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3922ae8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3922ae8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3922ae8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x12218, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEQUAL_U.VSSX", cAlternateFileName="EEQUAL~4.VSS")) returned 1
	[0070.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5464
	[0070.987] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.987] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ec2a6a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ec2a6a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ee8cf4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xfb1f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEQUAL_VISIO2013_M.VSSX", cAlternateFileName="EEQUAL~2.VSS")) returned 1
	[0070.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5468
	[0070.988] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.988] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x32e07e4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x32e07e4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x32e07e4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf17c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEQUAL_VISIO2013_U.VSSX", cAlternateFileName="EEQUAL~3.VSS")) returned 1
	[0070.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x546c
	[0070.989] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.989] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1729263, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1729263, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18ccc9d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x27da7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESEMI_M.VSSX", cAlternateFileName="EESEMI~2.VSS")) returned 1
	[0070.989] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5470
	[0070.990] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.990] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b2f0f8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1b2f0f8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1b553ef, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x26fdb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESEMI_U.VSSX", cAlternateFileName="EESEMI~3.VSS")) returned 1
	[0070.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5474
	[0070.991] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.991] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x318928f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x318928f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x318928f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15e9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESEMI_VISIO2013_M.VSSX", cAlternateFileName="EESEMI~4.VSS")) returned 1
	[0070.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5478
	[0070.993] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.993] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16908c8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x16908c8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x16908c8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x156cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESEMI_VISIO2013_U.VSSX", cAlternateFileName="EESEMI~1.VSS")) returned 1
	[0070.993] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x547c
	[0070.994] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.994] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19fdec5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x19fdec5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1a96a42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x37185, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESWCH_M.VSSX", cAlternateFileName="EESWCH~2.VSS")) returned 1
	[0070.994] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5480
	[0070.995] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.995] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b09036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1b09036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1b09036, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x36899, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESWCH_U.VSSX", cAlternateFileName="EESWCH~3.VSS")) returned 1
	[0070.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5484
	[0070.996] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.996] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x332cc84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x332cc84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x332cc84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x24fda, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESWCH_VISIO2013_M.VSSX", cAlternateFileName="EESWCH~4.VSS")) returned 1
	[0070.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0070.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5488
	[0070.997] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0070.997] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18f2ea7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x231f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESWCH_VISIO2013_U.VSSX", cAlternateFileName="EESWCH~1.VSS")) returned 1
	[0071.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x548c
	[0071.001] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.002] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a459ce, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a459ce, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a459ce, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3d2d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESYS_M.VSTX", cAlternateFileName="EESYS_~1.VST")) returned 1
	[0071.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5490
	[0071.002] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.003] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4ade205, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4ade205, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ade205, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3b6d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EESYS_U.VSTX", cAlternateFileName="EESYS_~2.VST")) returned 1
	[0071.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5494
	[0071.004] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.004] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381796f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x381796f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x381796f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x12491, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EETCOM_M.VSSX", cAlternateFileName="EETCOM~2.VSS")) returned 1
	[0071.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5498
	[0071.005] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.005] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1729263, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1729263, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18ccc9d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x112f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EETCOM_U.VSSX", cAlternateFileName="EETCOM~1.VSS")) returned 1
	[0071.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x549c
	[0071.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.006] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x30ca74c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x30ca74c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x30ca74c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15e4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EETERM_M.VSSX", cAlternateFileName="EETERM~1.VSS")) returned 1
	[0071.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54a0
	[0071.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.007] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b0397, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x38b0397, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x38b0397, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14f94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EETERM_U.VSSX", cAlternateFileName="EETERM~2.VSS")) returned 1
	[0071.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54a4
	[0071.007] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.060] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c1d957, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3c1d957, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3c1d957, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x113b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EETRAN_M.VSSX", cAlternateFileName="EETRAN~2.VSS")) returned 1
	[0071.060] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54a8
	[0071.061] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.061] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b38b79, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b38b79, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3b38b79, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1073d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EETRAN_U.VSSX", cAlternateFileName="EETRAN~1.VSS")) returned 1
	[0071.061] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54ac
	[0071.062] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.062] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3cb62d8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3cb62d8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3cb62d8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x18cb4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEVHF_M.VSSX", cAlternateFileName="EEVHF_~2.VSS")) returned 1
	[0071.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54b0
	[0071.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.063] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1ee8cf4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1ee8cf4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1ee8cf4, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17ceb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEVHF_U.VSSX", cAlternateFileName="EEVHF_~1.VSS")) returned 1
	[0071.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54b4
	[0071.064] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.064] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c6049a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c6049a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c6049a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x19bef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ELETEL_M.VSSX", cAlternateFileName="ELETEL~1.VSS")) returned 1
	[0071.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54b8
	[0071.064] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.065] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4ade205, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4ade205, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ade205, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ELETEL_M.VSTX", cAlternateFileName="ELETEL~2.VST")) returned 1
	[0071.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54bc
	[0071.065] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.065] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e76730, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e76730, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e76730, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1af42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ELETEL_U.VSSX", cAlternateFileName="ELETEL~2.VSS")) returned 1
	[0071.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c0
	[0071.066] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.066] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a6bc7c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4f9f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ELETEL_U.VSTX", cAlternateFileName="ELETEL~1.VST")) returned 1
	[0071.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c4
	[0071.067] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.067] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3bab26c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3bab26c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3bab26c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2d05e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EMBELL_M.VSSX", cAlternateFileName="EMBELL~2.VSS")) returned 1
	[0071.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c8
	[0071.068] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.068] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a2dae6, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3a2dae6, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3a2dae6, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2abb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EMBELL_U.VSSX", cAlternateFileName="EMBELL~1.VSS")) returned 1
	[0071.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54cc
	[0071.068] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.069] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2930e76, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2930e76, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x295718d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2c76d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENTAPP_M.VSSX", cAlternateFileName="ENTAPP~2.VSS")) returned 1
	[0071.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54d0
	[0071.069] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.069] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a91d98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a91d98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ab8038, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8ecd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENTAPP_M.VSTX", cAlternateFileName="ENTAPP~2.VST")) returned 1
	[0071.069] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54d4
	[0071.104] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.104] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c6049a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c6049a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c6049a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2c644, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENTAPP_U.VSSX", cAlternateFileName="ENTAPP~1.VSS")) returned 1
	[0071.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54d8
	[0071.105] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.105] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a91d98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a91d98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a91d98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8dd7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENTAPP_U.VSTX", cAlternateFileName="ENTAPP~1.VST")) returned 1
	[0071.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54dc
	[0071.106] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.106] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e03f98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e03f98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e03f98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EPC_M.VSSX", cAlternateFileName="EPC_M~1.VSS")) returned 1
	[0071.106] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54e0
	[0071.106] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.106] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a91d98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a91d98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a91d98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4008, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EPC_M.VSTX", cAlternateFileName="EPC_M~1.VST")) returned 1
	[0071.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54e4
	[0071.107] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.107] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1c1403a, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1c1403a, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1c3a235, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7871, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EPC_U.VSSX", cAlternateFileName="EPC_U~1.VSS")) returned 1
	[0071.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54e8
	[0071.108] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.108] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4a6bc7c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4a6bc7c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4a91d98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3f5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EPC_U.VSTX", cAlternateFileName="EPC_U~1.VST")) returned 1
	[0071.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54ec
	[0071.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.109] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x193f5ad, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x193f5ad, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x19d7f1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5f3b3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCOBJ_M.VSSX", cAlternateFileName="EXCOBJ~2.VSS")) returned 1
	[0071.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54f0
	[0071.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.110] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1729263, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5da42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXCOBJ_U.VSSX", cAlternateFileName="EXCOBJ~1.VSS")) returned 1
	[0071.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54f4
	[0071.110] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.110] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3758e40, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3758e40, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3758e40, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x258f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FASTN1_M.VSSX", cAlternateFileName="FASTN1~1.VSS")) returned 1
	[0071.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54f8
	[0071.111] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0071.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0071.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54fc
	[0071.112] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.059] SetLastError (dwErrCode=0x0) 
	[0072.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.061] GetLastError () returned 0x5
	[0072.061] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0072.061] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.061] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 0
	[0072.061] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0072.061] SetLastError (dwErrCode=0x0) 
	[0072.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.062] GetLastError () returned 0x5
	[0072.062] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0072.062] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.062] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1
	[0072.062] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x81c496, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x622, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="visio.exe.manifest", cAlternateFileName="VISIOE~1.MAN")) returned 1
	[0072.062] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISIO.VisualElementsManifest.xml", cAlternateFileName="VISIOV~1.XML")) returned 1
	[0072.062] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5110
	[0072.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.063] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x525199b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VisioCustom.propdesc", cAlternateFileName="VISIOC~1.PRO")) returned 1
	[0072.063] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5114
	[0072.063] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x11cbd0e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x166a9d2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x19ddea8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISLIB.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3ecc3a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISOCX.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6089d0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7858, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISSHE.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x525199b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbb048, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISUTILS.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x117868, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VISWEB.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1bcd2cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VPREVIEW.EXE", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87b450, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2392c2f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd06450, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2392c2f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0e60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WEBSANDBOX.DLL", cAlternateFileName="WEBSAN~1.DLL")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd5c75d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd5c75d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd5c75d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17c68, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Win32MsgQueue.dll", cAlternateFileName="WIN32M~1.DLL")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2392c2f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x680c8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="windowsspeakerrecosdk.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3abf78f6, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b50e439, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1cf6848, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WINPROJ.EXE", cAlternateFileName="")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3ac69d72, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3ac69d72, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b154d75, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xf7d, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="winproj.exe.manifest", cAlternateFileName="WINPRO~1.MAN")) returned 1
	[0072.064] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WINPROJ.VisualElementsManifest.xml", cAlternateFileName="WINPRO~1.XML")) returned 1
	[0072.064] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bd0
	[0072.065] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.065] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3aeff25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd52c882e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5c05a3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d74a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WINWORD.EXE", cAlternateFileName="")) returned 1
	[0072.065] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x239787c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WINWORD.VisualElementsManifest.xml", cAlternateFileName="WINWOR~1.XML")) returned 1
	[0072.065] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bd4
	[0072.065] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.066] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23a373ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4a2a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Wordcnv.dll", cAlternateFileName="")) returned 1
	[0072.066] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Wordcnvpxy.cnv", cAlternateFileName="WORDCN~1.CNV")) returned 1
	[0072.066] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bd8
	[0072.066] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.066] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x240c5be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe52a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Wordcnvr.dll", cAlternateFileName="")) returned 1
	[0072.066] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe289dd92, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe289dd92, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d3c6cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8240, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Wordconv.exe", cAlternateFileName="")) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1
	[0072.067] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bdc
	[0072.067] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x23a373ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WORDICON.EXE", cAlternateFileName="")) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd48b8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WORKFLOW.DLL", cAlternateFileName="")) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3aa3bf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3aa3bf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5c2bca3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x235d0a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WWLIB.DLL", cAlternateFileName="")) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xcb4c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="XFUNC.DLL", cAlternateFileName="")) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="XLCALL32.DLL", cAlternateFileName="")) returned 1
	[0072.067] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2415e4bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2466f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3840a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="XLICONS.EXE", cAlternateFileName="")) returned 1
	[0072.068] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="XLSTART", cAlternateFileName="")) returned 1
	[0072.068] SetLastError (dwErrCode=0x0) 
	[0072.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.068] GetLastError () returned 0x5
	[0072.068] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0072.068] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0072.068] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.068] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0072.068] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0072.068] SetLastError (dwErrCode=0x0) 
	[0072.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLSTART\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlstart\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.068] GetLastError () returned 0x5
	[0072.068] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0072.068] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.068] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1
	[0072.068] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5be0
	[0072.069] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.069] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 0
	[0072.069] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0072.069] SetLastError (dwErrCode=0x0) 
	[0072.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.070] GetLastError () returned 0x5
	[0072.070] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0072.070] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.070] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="rsod", cAlternateFileName="")) returned 1
	[0072.070] SetLastError (dwErrCode=0x0) 
	[0072.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.070] GetLastError () returned 0x5
	[0072.095] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0072.095] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0072.098] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.100] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21b9b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="access.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ACCESS~1.DAT")) returned 1
	[0072.100] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5be4
	[0072.101] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.102] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf475553, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x44d12, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="access.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ACCESS~4.DAT")) returned 1
	[0072.102] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5be8
	[0072.103] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.103] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9376, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~3.DAT")) returned 1
	[0072.103] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bec
	[0072.104] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.104] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d0baf0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9623, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessmui.msi.16.en-us.tree.dat", cAlternateFileName="ACC776~1.DAT")) returned 1
	[0072.104] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bf0
	[0072.105] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.105] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessmuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~2.DAT")) returned 1
	[0072.105] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bf4
	[0072.106] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.107] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04ffae9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessmuiset.msi.16.en-us.tree.dat", cAlternateFileName="AC82F7~1.DAT")) returned 1
	[0072.107] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bf8
	[0072.107] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.108] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dcf.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="DCFX-N~1.DAT")) returned 1
	[0072.108] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bfc
	[0072.109] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.109] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf6fdca2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25e95, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dcf.x-none.msi.16.x-none.tree.dat", cAlternateFileName="DCFX-N~2.DAT")) returned 1
	[0072.109] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c04
	[0072.110] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.110] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dcfmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="DCFMUI~1.DAT")) returned 1
	[0072.110] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c08
	[0072.111] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.111] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd054bfa0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="dcfmui.msi.16.en-us.tree.dat", cAlternateFileName="DCFMUI~2.DAT")) returned 1
	[0072.111] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c0c
	[0072.112] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.112] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58b03, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="excel.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="EXCELX~1.DAT")) returned 1
	[0072.112] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c10
	[0072.113] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.113] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcee3319e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94277, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="excel.x-none.msi.16.x-none.tree.dat", cAlternateFileName="EXCELX~2.DAT")) returned 1
	[0072.114] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c14
	[0072.114] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.115] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="excelmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="EXCELM~1.DAT")) returned 1
	[0072.115] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c18
	[0072.116] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.116] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd048d683, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x646e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="excelmui.msi.16.en-us.tree.dat", cAlternateFileName="EXCELM~2.DAT")) returned 1
	[0072.116] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c1c
	[0072.117] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.263] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4276, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groove.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="GROOVE~1.DAT")) returned 1
	[0072.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c20
	[0072.264] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.265] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf0e1caa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x621d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groove.x-none.msi.16.x-none.tree.dat", cAlternateFileName="GROOVE~3.DAT")) returned 1
	[0072.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c24
	[0072.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.266] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x127a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groovemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="GROOVE~2.DAT")) returned 1
	[0072.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c28
	[0072.266] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04b3616, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x179f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="groovemui.msi.16.en-us.tree.dat", cAlternateFileName="GROOVE~4.DAT")) returned 1
	[0072.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c2c
	[0072.267] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.267] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x40ee9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lync.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="LYNCX-~1.DAT")) returned 1
	[0072.267] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c30
	[0072.268] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.268] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf2391cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf2391cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf8c794a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lync.x-none.msi.16.x-none.tree.dat", cAlternateFileName="LYNCX-~2.DAT")) returned 1
	[0072.268] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c34
	[0072.269] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.269] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2740, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lyncmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="LYNCMU~1.DAT")) returned 1
	[0072.269] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c38
	[0072.270] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.270] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03f4a77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f36, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="lyncmui.msi.16.en-us.tree.dat", cAlternateFileName="LYNCMU~2.DAT")) returned 1
	[0072.270] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c3c
	[0072.271] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.271] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa06c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~2.DAT")) returned 1
	[0072.271] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c40
	[0072.272] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.272] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0440f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff0cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OFDF3A~1.DAT")) returned 1
	[0072.341] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c44
	[0072.342] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.343] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ae, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32mui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OF09D4~1.DAT")) returned 1
	[0072.343] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c48
	[0072.343] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.344] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0572132, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0572132, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0656ff9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cf4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32mui.msi.16.en-us.tree.dat", cAlternateFileName="OF3D36~1.DAT")) returned 1
	[0072.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c4c
	[0072.344] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.344] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b8fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32ww.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~4.DAT")) returned 1
	[0072.344] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c50
	[0072.345] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.345] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0335ea1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x153aac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="office32ww.msi.16.x-none.tree.dat", cAlternateFileName="OFDFB3~1.DAT")) returned 1
	[0072.345] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c54
	[0072.346] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.346] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3334d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~1.DAT")) returned 1
	[0072.346] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c58
	[0072.347] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.347] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd060ab93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36b17, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemui.msi.16.en-us.tree.dat", cAlternateFileName="OF3E9E~1.DAT")) returned 1
	[0072.347] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c5c
	[0072.348] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.348] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~3.DAT")) returned 1
	[0072.348] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c60
	[0072.349] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.349] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd06c975a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="officemuiset.msi.16.en-us.tree.dat", cAlternateFileName="OFCB7C~1.DAT")) returned 1
	[0072.349] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c64
	[0072.350] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.350] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11bd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="onenote.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ONENOT~2.DAT")) returned 1
	[0072.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c68
	[0072.351] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.351] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0251012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c425, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="onenote.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ONENOT~3.DAT")) returned 1
	[0072.351] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c6c
	[0072.352] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.352] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="onenotemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ONENOT~1.DAT")) returned 1
	[0072.352] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c70
	[0072.353] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.353] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0572132, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="onenotemui.msi.16.en-us.tree.dat", cAlternateFileName="ONENOT~4.DAT")) returned 1
	[0072.353] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c74
	[0072.354] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.354] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osm.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMX-N~1.DAT")) returned 1
	[0072.354] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c78
	[0072.355] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.355] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd02e99f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osm.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMX-N~2.DAT")) returned 1
	[0072.355] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c7c
	[0072.356] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.356] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMMUI~1.DAT")) returned 1
	[0072.356] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c80
	[0072.357] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.357] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd089348e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x134e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMMUI~2.DAT")) returned 1
	[0072.357] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c84
	[0072.358] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.358] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmux.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMUXX~1.DAT")) returned 1
	[0072.359] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c88
	[0072.359] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.359] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfc813cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmux.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMUXX~2.DAT")) returned 1
	[0072.360] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c8c
	[0072.360] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.360] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmuxmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMUXM~1.DAT")) returned 1
	[0072.361] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c90
	[0072.361] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.362] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd08df8b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x263d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmuxmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMUXM~2.DAT")) returned 1
	[0072.362] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c94
	[0072.362] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.363] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cd75, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="outlook.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OUTLOO~1.DAT")) returned 1
	[0072.363] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c98
	[0072.363] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.364] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfa915dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x913cb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="outlook.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OUTLOO~3.DAT")) returned 1
	[0072.364] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c9c
	[0072.364] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.365] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="outlookmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OUTLOO~2.DAT")) returned 1
	[0072.365] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.365] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ca0
	[0072.365] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.366] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0715cb9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="outlookmui.msi.16.en-us.tree.dat", cAlternateFileName="OUTLOO~4.DAT")) returned 1
	[0072.367] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ca4
	[0072.432] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.432] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpivot.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~1.DAT")) returned 1
	[0072.432] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ca8
	[0072.433] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.433] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcff7c3ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x81963, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpivot.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POWERP~4.DAT")) returned 1
	[0072.433] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cac
	[0072.434] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.434] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ca6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpoint.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~3.DAT")) returned 1
	[0072.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cb0
	[0072.435] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.435] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd04b3616, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd04b3616, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd059845b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x59af4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpoint.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POA51D~1.DAT")) returned 1
	[0072.435] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cb4
	[0072.436] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.436] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x405c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpointmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="POWERP~2.DAT")) returned 1
	[0072.436] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.437] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cb8
	[0072.437] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.437] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd07ae4bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a23, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="powerpointmui.msi.16.en-us.tree.dat", cAlternateFileName="PO677D~1.DAT")) returned 1
	[0072.437] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cbc
	[0072.438] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.438] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x229c5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="project.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PROJEC~1.DAT")) returned 1
	[0072.438] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc0
	[0072.439] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.439] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b1a0d3d, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3a1db, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="project.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PROJEC~4.DAT")) returned 1
	[0072.439] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc4
	[0072.440] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.440] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9910b72, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="projectmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROJEC~2.DAT")) returned 1
	[0072.440] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc8
	[0072.441] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.441] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x76a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="projectmui.msi.16.en-us.tree.dat", cAlternateFileName="PROJEC~3.DAT")) returned 1
	[0072.441] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ccc
	[0072.442] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.442] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47f6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proof.en-us.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFE~1.DAT")) returned 1
	[0072.442] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cd0
	[0072.443] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.443] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0aa952a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proof.en-us.msi.16.en-us.tree.dat", cAlternateFileName="PROOFE~3.DAT")) returned 1
	[0072.443] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cd4
	[0072.444] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.444] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f6a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proof.es-es.msi.16.es-es.boot.tree.dat", cAlternateFileName="PROOFE~2.DAT")) returned 1
	[0072.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cd8
	[0072.446] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.446] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f21c2b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5de7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proof.es-es.msi.16.es-es.tree.dat", cAlternateFileName="PROOFE~4.DAT")) returned 1
	[0072.446] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cdc
	[0072.447] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.447] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f96, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proof.fr-fr.msi.16.fr-fr.boot.tree.dat", cAlternateFileName="PROOFF~1.DAT")) returned 1
	[0072.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ce0
	[0072.448] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.448] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09ea90c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e25, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proof.fr-fr.msi.16.fr-fr.tree.dat", cAlternateFileName="PROOFF~2.DAT")) returned 1
	[0072.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.449] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ce4
	[0072.449] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.449] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proofing.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFI~1.DAT")) returned 1
	[0072.449] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.450] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ce8
	[0072.450] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.450] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0af5a16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="proofing.msi.16.en-us.tree.dat", cAlternateFileName="PROOFI~2.DAT")) returned 1
	[0072.450] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.451] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cec
	[0072.451] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.451] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1851f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="publisher.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PUBLIS~2.DAT")) returned 1
	[0072.451] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.452] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cf0
	[0072.452] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.453] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd05e48fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x236f9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="publisher.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PUBLIS~3.DAT")) returned 1
	[0072.453] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.453] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cf4
	[0072.453] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.454] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="publishermui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PUBLIS~1.DAT")) returned 1
	[0072.454] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cf8
	[0072.454] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.455] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b8e391, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b0f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="publishermui.msi.16.en-us.tree.dat", cAlternateFileName="PUBLIS~4.DAT")) returned 1
	[0072.455] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.455] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cfc
	[0072.455] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.456] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x387c3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="visio.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="VISIOX~1.DAT")) returned 1
	[0072.456] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.456] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d00
	[0072.457] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.457] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x147a8a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x147a8a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x147a8a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x62499, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="visio.x-none.msi.16.x-none.tree.dat", cAlternateFileName="VISIOX~2.DAT")) returned 1
	[0072.457] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.457] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d04
	[0072.458] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.458] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x98e08, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="visiomui.msi.16.en-us.boot.tree.dat", cAlternateFileName="VISIOM~1.DAT")) returned 1
	[0072.458] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.458] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d08
	[0072.459] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.459] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1159842, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x98fc4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="visiomui.msi.16.en-us.tree.dat", cAlternateFileName="VISIOM~2.DAT")) returned 1
	[0072.459] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.460] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d0c
	[0072.460] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.460] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38343, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="word.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="WORDX-~1.DAT")) returned 1
	[0072.460] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.462] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d10
	[0072.463] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.463] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd022ae04, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd022ae04, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03a857f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67519, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="word.x-none.msi.16.x-none.tree.dat", cAlternateFileName="WORDX-~2.DAT")) returned 1
	[0072.463] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.463] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d14
	[0072.464] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.464] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbd39, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wordmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="WORDMU~1.DAT")) returned 1
	[0072.464] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.465] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d18
	[0072.465] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.465] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 1
	[0072.465] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d1c
	[0072.466] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.466] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 0
	[0072.466] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0072.468] SetLastError (dwErrCode=0x0) 
	[0072.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.472] GetLastError () returned 0x5
	[0072.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0072.472] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.472] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0072.472] SetLastError (dwErrCode=0x0) 
	[0072.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.472] GetLastError () returned 0x5
	[0072.472] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0072.472] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0072.473] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.473] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0072.473] SetLastError (dwErrCode=0x0) 
	[0072.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.473] GetLastError () returned 0x5
	[0072.473] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0072.473] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0072.475] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.476] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1
	[0072.476] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.476] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d24
	[0072.477] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.478] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1
	[0072.478] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.478] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d28
	[0072.478] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.479] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1
	[0072.479] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.479] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d2c
	[0072.479] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.480] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1
	[0072.480] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.480] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d30
	[0072.481] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.481] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1
	[0072.481] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.481] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d34
	[0072.482] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.482] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb524bc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb524bc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1
	[0072.482] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.482] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d38
	[0072.483] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.483] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1
	[0072.483] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.484] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d3c
	[0072.484] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.484] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1
	[0072.484] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.485] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d40
	[0072.485] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.485] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1
	[0072.485] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.486] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d44
	[0072.486] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.486] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1
	[0072.486] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.487] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d48
	[0072.487] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.487] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1
	[0072.488] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.488] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4c
	[0072.488] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.489] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1
	[0072.489] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.489] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d50
	[0072.489] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.490] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1
	[0072.490] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.490] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d54
	[0072.490] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.491] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1
	[0072.491] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.491] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d58
	[0072.492] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.495] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1
	[0072.495] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d5c
	[0072.496] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.496] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1
	[0072.497] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.497] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d60
	[0072.497] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.498] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1
	[0072.498] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.498] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d64
	[0072.498] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.499] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1
	[0072.499] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.499] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d68
	[0072.500] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.500] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1
	[0072.500] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.501] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d6c
	[0072.501] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.501] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1
	[0072.501] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.502] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d70
	[0072.502] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.502] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0
	[0072.502] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0072.503] SetLastError (dwErrCode=0x0) 
	[0072.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.507] GetLastError () returned 0x5
	[0072.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0072.508] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.508] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 0
	[0072.508] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0072.508] SetLastError (dwErrCode=0x0) 
	[0072.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.508] GetLastError () returned 0x5
	[0072.508] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0072.509] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.509] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0072.509] SetLastError (dwErrCode=0x0) 
	[0072.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.509] GetLastError () returned 0x5
	[0072.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0072.509] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.509] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0072.509] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.509] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0072.509] SetLastError (dwErrCode=0x0) 
	[0072.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.509] GetLastError () returned 0x5
	[0072.509] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0072.509] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0072.513] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.514] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Access", cAlternateFileName="")) returned 1
	[0072.514] SetLastError (dwErrCode=0x0) 
	[0072.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.516] GetLastError () returned 0x5
	[0072.516] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0072.516] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.516] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0072.517] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.517] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11300d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="accessparts.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0072.517] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.517] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d78
	[0072.518] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.518] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DataType", cAlternateFileName="")) returned 1
	[0072.518] SetLastError (dwErrCode=0x0) 
	[0072.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.518] GetLastError () returned 0x5
	[0072.518] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0072.518] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0072.521] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.521] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1
	[0072.521] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.521] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d80
	[0072.522] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.522] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1
	[0072.522] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.523] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d84
	[0072.523] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.524] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1
	[0072.524] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.525] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d88
	[0072.525] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.525] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1
	[0072.525] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.526] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d8c
	[0072.526] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.527] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1
	[0072.527] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.527] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d90
	[0072.527] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.528] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1
	[0072.528] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.528] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d94
	[0072.529] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.529] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1
	[0072.529] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.529] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d98
	[0072.530] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.530] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf23, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1
	[0072.530] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.531] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d9c
	[0072.531] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.531] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1
	[0072.531] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.532] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5da0
	[0072.532] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.532] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0
	[0072.533] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0072.534] SetLastError (dwErrCode=0x0) 
	[0072.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.538] GetLastError () returned 0x5
	[0072.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0072.538] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.538] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Part", cAlternateFileName="")) returned 1
	[0072.538] SetLastError (dwErrCode=0x0) 
	[0072.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.538] GetLastError () returned 0x5
	[0072.538] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0072.538] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.538] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0072.543] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0072.543] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5707, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1
	[0072.543] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.544] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5da4
	[0072.544] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.545] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1
	[0072.545] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.545] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5da8
	[0072.545] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.546] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1
	[0072.546] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.546] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dac
	[0072.546] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.547] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1
	[0072.547] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5db0
	[0072.548] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.548] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1
	[0072.548] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.548] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5db4
	[0072.549] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.549] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1
	[0072.549] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.549] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6f2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5db8
	[0072.550] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.550] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1
	[0072.550] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.551] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d72970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dbc
	[0072.551] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.551] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1
	[0072.551] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.552] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d76040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc0
	[0072.552] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.552] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1
	[0072.552] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.553] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d79710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc4
	[0072.553] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.554] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1
	[0072.554] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.554] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d7cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc8
	[0072.905] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.905] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1
	[0072.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dcc
	[0072.906] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.906] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ca4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1
	[0072.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dd0
	[0072.907] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.907] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x550d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1
	[0072.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dd4
	[0072.907] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.908] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cfc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1
	[0072.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dd8
	[0072.908] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.908] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1
	[0072.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ddc
	[0072.909] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.909] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0
	[0072.909] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0072.910] SetLastError (dwErrCode=0x0) 
	[0072.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.911] GetLastError () returned 0x5
	[0072.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0072.911] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.911] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Part", cAlternateFileName="")) returned 0
	[0072.912] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0072.912] SetLastError (dwErrCode=0x0) 
	[0072.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.912] GetLastError () returned 0x5
	[0072.912] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0072.912] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.912] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0072.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d74
	[0072.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.913] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36f5b1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1
	[0072.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d7c
	[0072.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.914] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a4e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1
	[0072.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5de0
	[0072.914] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.914] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1
	[0072.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5de4
	[0072.915] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.915] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1
	[0072.915] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5de8
	[0072.916] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.916] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1
	[0072.916] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dec
	[0072.917] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.917] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1
	[0072.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5df0
	[0072.917] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.918] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1
	[0072.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5df4
	[0072.918] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.918] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1
	[0072.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5df8
	[0072.920] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.920] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1
	[0072.920] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dfc
	[0072.920] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.921] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1
	[0072.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e00
	[0072.921] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.922] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1
	[0072.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e04
	[0072.922] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.923] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1
	[0072.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e08
	[0072.923] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.923] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1
	[0072.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e0c
	[0072.924] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.924] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37480, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1
	[0072.924] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e10
	[0072.925] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.925] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36007, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1
	[0072.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e14
	[0072.926] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.926] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1
	[0072.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e18
	[0072.926] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.927] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a3d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1
	[0072.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e1c
	[0072.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.927] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1
	[0072.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e20
	[0072.928] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.928] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ChronologicalLetter.dotx", cAlternateFileName="CHRONO~1.DOT")) returned 1
	[0072.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e24
	[0072.929] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.929] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11aa1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ChronologicalResume.dotx", cAlternateFileName="CHRONO~2.DOT")) returned 1
	[0072.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e28
	[0072.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.930] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb714a07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1
	[0072.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e2c
	[0072.931] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.931] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1
	[0072.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e30
	[0072.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.932] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e536, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1
	[0072.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e34
	[0072.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.933] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbafe9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1
	[0072.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e38
	[0072.933] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.933] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7ad38b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4593e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1
	[0072.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e3c
	[0072.934] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.934] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1
	[0072.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0072.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e40
	[0072.935] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0072.935] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GettingStarted16", cAlternateFileName="GETTIN~1")) returned 1
	[0072.935] SetLastError (dwErrCode=0x0) 
	[0072.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.935] GetLastError () returned 0x5
	[0072.935] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0072.936] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0073.002] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.002] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.002] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0073.002] SetLastError (dwErrCode=0x0) 
	[0073.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\gettingstarted16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.002] GetLastError () returned 0x5
	[0073.002] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.003] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.003] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1
	[0073.003] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e44
	[0073.003] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.004] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAIL.OFT", cAlternateFileName="")) returned 1
	[0073.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e48
	[0073.004] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.004] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bcc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1
	[0073.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e4c
	[0073.005] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.005] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONENOTE", cAlternateFileName="")) returned 1
	[0073.005] SetLastError (dwErrCode=0x0) 
	[0073.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.005] GetLastError () returned 0x5
	[0073.005] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.006] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0073.006] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.006] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="16", cAlternateFileName="")) returned 1
	[0073.006] SetLastError (dwErrCode=0x0) 
	[0073.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.006] GetLastError () returned 0x5
	[0073.006] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0073.006] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0073.006] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.006] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1
	[0073.006] SetLastError (dwErrCode=0x0) 
	[0073.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.006] GetLastError () returned 0x5
	[0073.006] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0073.006] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.006] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0073.007] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.007] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1
	[0073.007] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e5c
	[0073.008] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.008] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 0
	[0073.008] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0073.008] SetLastError (dwErrCode=0x0) 
	[0073.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\notebook templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.008] GetLastError () returned 0x5
	[0073.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0073.009] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.009] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0073.009] SetLastError (dwErrCode=0x0) 
	[0073.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.009] GetLastError () returned 0x5
	[0073.009] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0073.009] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.009] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0073.009] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.009] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1
	[0073.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e60
	[0073.010] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.010] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1
	[0073.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e64
	[0073.010] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.011] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7d35ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1
	[0073.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e68
	[0073.011] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.011] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7ad38b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1
	[0073.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e6c
	[0073.012] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.012] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1
	[0073.012] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e70
	[0073.013] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.013] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0
	[0073.013] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0073.013] SetLastError (dwErrCode=0x0) 
	[0073.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.014] GetLastError () returned 0x5
	[0073.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0073.014] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0
	[0073.014] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0073.014] SetLastError (dwErrCode=0x0) 
	[0073.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.014] GetLastError () returned 0x5
	[0073.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0073.014] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="16", cAlternateFileName="")) returned 0
	[0073.014] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0073.014] SetLastError (dwErrCode=0x0) 
	[0073.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.014] GetLastError () returned 0x5
	[0073.014] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.014] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1
	[0073.014] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e50
	[0073.015] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.015] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f49, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1
	[0073.015] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e54
	[0073.016] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.016] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OriginResume.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1
	[0073.016] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e58
	[0073.017] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.017] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1
	[0073.017] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e74
	[0073.017] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.018] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1
	[0073.018] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e78
	[0073.018] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.019] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1
	[0073.019] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e7c
	[0073.020] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.020] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1
	[0073.020] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e80
	[0073.021] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.021] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RedAndBlackLetter.dotx", cAlternateFileName="REDAND~2.DOT")) returned 1
	[0073.021] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e84
	[0073.021] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.021] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b56a6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RedAndBlackReport.dotx", cAlternateFileName="REDAND~1.DOT")) returned 1
	[0073.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e88
	[0073.022] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.022] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb86bf6b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1
	[0073.022] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e8c
	[0073.023] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.023] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc51, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="StudentReport.dotx", cAlternateFileName="STUDEN~1.DOT")) returned 1
	[0073.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e90
	[0073.024] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.024] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1
	[0073.024] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e94
	[0073.025] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.025] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1
	[0073.025] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e98
	[0073.026] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.026] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TimelessLetter.dotx", cAlternateFileName="TIMELE~2.DOT")) returned 1
	[0073.026] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e9c
	[0073.026] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.027] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43753, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TimelessReport.dotx", cAlternateFileName="TIMELE~3.DOT")) returned 1
	[0073.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ea0
	[0073.027] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.027] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TimelessResume.dotx", cAlternateFileName="TIMELE~1.DOT")) returned 1
	[0073.027] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ea4
	[0073.028] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.028] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1
	[0073.028] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1
	[0073.028] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ea8
	[0073.029] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.029] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1
	[0073.029] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5eac
	[0073.030] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.030] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 0
	[0073.030] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0073.030] SetLastError (dwErrCode=0x0) 
	[0073.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.030] GetLastError () returned 0x5
	[0073.030] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.030] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.030] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0073.030] SetLastError (dwErrCode=0x0) 
	[0073.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.031] GetLastError () returned 0x5
	[0073.031] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.031] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.031] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0073.032] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.032] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Maple.gif", cAlternateFileName="")) returned 1
	[0073.032] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5eb0
	[0073.032] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.033] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Maple.gif", cAlternateFileName="")) returned 0
	[0073.033] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0073.033] SetLastError (dwErrCode=0x0) 
	[0073.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.033] GetLastError () returned 0x5
	[0073.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.033] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.033] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0
	[0073.033] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0073.033] SetLastError (dwErrCode=0x0) 
	[0073.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.033] GetLastError () returned 0x5
	[0073.033] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0073.033] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.033] FindNextFileW (in: hFindFile=0x274bd1fb890, lpFindFileData=0xe68cf7d450 | out: lpFindFileData=0xe68cf7d450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VFS", cAlternateFileName="")) returned 1
	[0073.033] SetLastError (dwErrCode=0x0) 
	[0073.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.033] GetLastError () returned 0x5
	[0073.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7d3f0, lpOverlapped=0x0) returned 0
	[0073.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*.*", lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbfb0
	[0073.034] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.034] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Common AppData", cAlternateFileName="COMMON~2")) returned 1
	[0073.034] SetLastError (dwErrCode=0x0) 
	[0073.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.034] GetLastError () returned 0x5
	[0073.034] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.034] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0073.035] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.035] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft", cAlternateFileName="MICROS~2")) returned 1
	[0073.035] SetLastError (dwErrCode=0x0) 
	[0073.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.035] GetLastError () returned 0x5
	[0073.035] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.035] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0073.035] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.035] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0073.035] SetLastError (dwErrCode=0x0) 
	[0073.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.036] GetLastError () returned 0x5
	[0073.036] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0073.036] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0073.175] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.175] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0073.175] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.176] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ebc
	[0073.176] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.176] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
	[0073.176] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.177] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec0
	[0073.177] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.177] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Heartbeat", cAlternateFileName="HEARTB~1")) returned 1
	[0073.177] SetLastError (dwErrCode=0x0) 
	[0073.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.177] GetLastError () returned 0x5
	[0073.177] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0073.177] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0073.177] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.178] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2e5eac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2e5eac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2e5eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.178] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0073.178] SetLastError (dwErrCode=0x0) 
	[0073.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\Heartbeat\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\heartbeat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.178] GetLastError () returned 0x5
	[0073.178] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0073.178] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.178] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0073.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec4
	[0073.178] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.179] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
	[0073.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec8
	[0073.179] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.179] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
	[0073.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ecc
	[0073.180] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.180] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
	[0073.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ed0
	[0073.181] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.181] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 0
	[0073.181] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0073.181] SetLastError (dwErrCode=0x0) 
	[0073.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.181] GetLastError () returned 0x5
	[0073.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0073.181] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.181] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0073.181] SetLastError (dwErrCode=0x0) 
	[0073.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.181] GetLastError () returned 0x5
	[0073.181] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0073.181] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.181] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0073.182] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.182] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.182] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0073.182] SetLastError (dwErrCode=0x0) 
	[0073.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\VISIO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\visio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.182] GetLastError () returned 0x5
	[0073.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0073.183] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.183] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISIO", cAlternateFileName="")) returned 0
	[0073.183] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0073.183] SetLastError (dwErrCode=0x0) 
	[0073.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.183] GetLastError () returned 0x5
	[0073.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.183] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.183] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1
	[0073.183] SetLastError (dwErrCode=0x0) 
	[0073.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.183] GetLastError () returned 0x5
	[0073.183] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.183] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0073.185] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.185] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1
	[0073.185] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5eb8
	[0073.186] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.186] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.EXCEL.16.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1
	[0073.186] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ed4
	[0073.187] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.187] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.GRAPH.16.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1
	[0073.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ed8
	[0073.187] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.187] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf455209f, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.GROOVE.16.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1
	[0073.187] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5edc
	[0073.188] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.LYNC.16.1033.hxn", cAlternateFileName="MSLYNC~1.HXN")) returned 1
	[0073.188] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ee0
	[0073.189] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x178, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.LYNC_BASIC.16.1033.hxn", cAlternateFileName="MSLYNC~2.HXN")) returned 1
	[0073.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ee4
	[0073.189] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.190] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.LYNC_ONLINE.16.1033.hxn", cAlternateFileName="MSLYNC~3.HXN")) returned 1
	[0073.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ee8
	[0073.190] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.190] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4610c9d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.MSACCESS.16.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1
	[0073.190] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5eec
	[0073.191] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.191] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.MSOUC.16.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1
	[0073.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ef0
	[0073.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.192] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f5c319, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.MSPUB.16.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1
	[0073.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ef4
	[0073.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.192] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42efb5b, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.ONENOTE.16.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1
	[0073.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ef8
	[0073.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.193] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf401af21, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.OUTLOOK.16.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1
	[0073.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5efc
	[0073.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.194] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3f825df, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.POWERPNT.16.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1
	[0073.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f00
	[0073.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.195] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4315e64, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.SETLANG.16.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1
	[0073.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f04
	[0073.195] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.195] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.SKYPEFB.16.1033.hxn", cAlternateFileName="MSSKYP~1.HXN")) returned 1
	[0073.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f08
	[0073.197] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.198] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.SKYPEFB_BASIC.16.1033.hxn", cAlternateFileName="MSSKYP~2.HXN")) returned 1
	[0073.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f0c
	[0073.198] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.199] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.SKYPEFB_ONLINE.16.1033.hxn", cAlternateFileName="MSSKYP~3.HXN")) returned 1
	[0073.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f10
	[0073.199] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.199] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed552881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed552881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44471a3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.SKYPEFB_ONLINEG.16.1033.hxn", cAlternateFileName="MSSKYP~4.HXN")) returned 1
	[0073.200] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f14
	[0073.201] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.201] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.SPREADSHEETCOMPARE.16.1033.hxn", cAlternateFileName="MSSPRE~1.HXN")) returned 1
	[0073.201] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.201] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f18
	[0073.201] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.202] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.VISIO.16.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1
	[0073.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f1c
	[0073.202] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.202] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.VISIO_PRM.16.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1
	[0073.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f20
	[0073.203] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.203] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xf3e9d89c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.VISIO_STD.16.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1
	[0073.203] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f24
	[0073.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.204] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.WINPROJ.16.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1
	[0073.204] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f28
	[0073.204] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.205] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x3b809370, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.WINPROJ_STD.16.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1
	[0073.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f2c
	[0073.205] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.205] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3e2b07e, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.WINWORD.16.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1
	[0073.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f30
	[0073.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.206] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1
	[0073.206] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f34
	[0073.207] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.207] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b85588b, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1418, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="nslist.hxl", cAlternateFileName="")) returned 0
	[0073.207] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0073.208] SetLastError (dwErrCode=0x0) 
	[0073.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.209] GetLastError () returned 0x5
	[0073.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.209] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.209] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0
	[0073.210] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0073.210] SetLastError (dwErrCode=0x0) 
	[0073.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.210] GetLastError () returned 0x5
	[0073.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.210] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1
	[0073.210] SetLastError (dwErrCode=0x0) 
	[0073.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.210] GetLastError () returned 0x5
	[0073.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.210] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0073.211] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.211] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1
	[0073.211] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245644bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245644bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1
	[0073.211] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1
	[0073.211] SetLastError (dwErrCode=0x0) 
	[0073.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.211] GetLastError () returned 0x5
	[0073.211] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.211] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0073.212] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Database Compare 2016.lnk", cAlternateFileName="DATABA~1.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6de, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office 2016 Language Preferences.lnk", cAlternateFileName="OFFICE~1.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fe, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office 2016 Upload Center.lnk", cAlternateFileName="OFFICE~2.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x766, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Project Server 2016 Accounts.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Skype for Business Recording Manager.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Spreadsheet Compare 2016.lnk", cAlternateFileName="SPREAD~1.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Telemetry Dashboard for Office 2016.lnk", cAlternateFileName="TELEME~1.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 1
	[0073.213] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x772, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Telemetry Log for Office 2016.lnk", cAlternateFileName="TELEME~2.LNK")) returned 0
	[0073.213] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0073.213] SetLastError (dwErrCode=0x0) 
	[0073.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\Microsoft Office 2016 Tools\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\microsoft office 2016 tools\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.215] GetLastError () returned 0x5
	[0073.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.215] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2466f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OneNote 2016.lnk", cAlternateFileName="ONENOT~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2466f613, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2466f613, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24695725, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Outlook 2016.lnk", cAlternateFileName="OUTLOO~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6ff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Project 2016.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Publisher 2016.lnk", cAlternateFileName="PUBLIS~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x703, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Skype for Business 2016.lnk", cAlternateFileName="SKYPEF~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5277b31, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5277b31, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Visio 2016.lnk", cAlternateFileName="VISIO2~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1
	[0073.215] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x246bb96e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0
	[0073.216] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0073.216] SetLastError (dwErrCode=0x0) 
	[0073.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common Programs\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common programs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.216] GetLastError () returned 0x5
	[0073.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.216] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.216] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0073.216] SetLastError (dwErrCode=0x0) 
	[0073.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.216] GetLastError () returned 0x5
	[0073.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0073.216] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbf50
	[0073.216] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.216] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="private", cAlternateFileName="")) returned 1
	[0073.216] SetLastError (dwErrCode=0x0) 
	[0073.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.216] GetLastError () returned 0x5
	[0073.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0073.217] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0073.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0073.219] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.219] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868d297b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xecf0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AGENCYB.TTF", cAlternateFileName="")) returned 1
	[0073.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f38
	[0073.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.220] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe628, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AGENCYR.TTF", cAlternateFileName="")) returned 1
	[0073.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f3c
	[0073.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.221] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12b2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ALGER.TTF", cAlternateFileName="")) returned 1
	[0073.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f40
	[0073.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.222] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24dd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ANTQUAB.TTF", cAlternateFileName="")) returned 1
	[0073.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f44
	[0073.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.223] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24b90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ANTQUABI.TTF", cAlternateFileName="")) returned 1
	[0073.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f48
	[0073.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.223] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24664, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ANTQUAI.TTF", cAlternateFileName="")) returned 1
	[0073.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f4c
	[0073.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.224] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2af54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARIALN.TTF", cAlternateFileName="")) returned 1
	[0073.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f50
	[0073.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.225] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c204, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARIALNB.TTF", cAlternateFileName="")) returned 1
	[0073.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f54
	[0073.226] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.226] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bf74, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARIALNBI.TTF", cAlternateFileName="")) returned 1
	[0073.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f58
	[0073.226] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.227] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c384, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARIALNI.TTF", cAlternateFileName="")) returned 1
	[0073.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f5c
	[0073.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.227] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARLRDBD.TTF", cAlternateFileName="")) returned 1
	[0073.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f60
	[0073.228] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.228] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASKVILL.TTF", cAlternateFileName="")) returned 1
	[0073.228] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f64
	[0073.229] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.229] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba1c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BAUHS93.TTF", cAlternateFileName="")) returned 1
	[0073.229] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f68
	[0073.230] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.231] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14b68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BELL.TTF", cAlternateFileName="")) returned 1
	[0073.231] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f6c
	[0073.231] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.232] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14294, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BELLB.TTF", cAlternateFileName="")) returned 1
	[0073.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f70
	[0073.233] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.233] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86d24d65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14110, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BELLI.TTF", cAlternateFileName="")) returned 1
	[0073.233] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f74
	[0073.234] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.234] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BERNHC.TTF", cAlternateFileName="")) returned 1
	[0073.234] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f78
	[0073.234] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25f88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BKANT.TTF", cAlternateFileName="")) returned 1
	[0073.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f7c
	[0073.235] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x122c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_B.TTF", cAlternateFileName="")) returned 1
	[0073.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f80
	[0073.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_BI.TTF", cAlternateFileName="")) returned 1
	[0073.236] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f84
	[0073.237] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14768, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_BLAI.TTF", cAlternateFileName="")) returned 1
	[0073.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f88
	[0073.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.238] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11f90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_BLAR.TTF", cAlternateFileName="")) returned 1
	[0073.238] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f8c
	[0073.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.239] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1216c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_CB.TTF", cAlternateFileName="")) returned 1
	[0073.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f90
	[0073.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.240] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13cb0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_CBI.TTF", cAlternateFileName="")) returned 1
	[0073.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f94
	[0073.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.241] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_CI.TTF", cAlternateFileName="")) returned 1
	[0073.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f98
	[0073.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.242] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_CR.TTF", cAlternateFileName="")) returned 1
	[0073.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f9c
	[0073.242] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.242] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_I.TTF", cAlternateFileName="")) returned 1
	[0073.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fa0
	[0073.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.243] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x165c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_PSTC.TTF", cAlternateFileName="")) returned 1
	[0073.243] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fa4
	[0073.244] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f14c12, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f14c12, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1303c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOD_R.TTF", cAlternateFileName="")) returned 1
	[0073.244] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fa8
	[0073.245] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.245] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8875ec88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOOKOS.TTF", cAlternateFileName="")) returned 1
	[0073.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fac
	[0073.246] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25bd0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOOKOSB.TTF", cAlternateFileName="")) returned 1
	[0073.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fb0
	[0073.247] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a9c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOOKOSBI.TTF", cAlternateFileName="")) returned 1
	[0073.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fb4
	[0073.444] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.445] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x883a5225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOOKOSI.TTF", cAlternateFileName="")) returned 1
	[0073.445] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.445] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fb8
	[0073.445] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.446] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRADHITC.TTF", cAlternateFileName="")) returned 1
	[0073.447] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.447] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fbc
	[0073.448] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.448] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9f18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRITANIC.TTF", cAlternateFileName="")) returned 1
	[0073.448] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.448] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc0
	[0073.450] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.623] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRLNSB.TTF", cAlternateFileName="")) returned 1
	[0073.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc4
	[0073.624] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.624] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87a8e187, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17a54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRLNSDB.TTF", cAlternateFileName="")) returned 1
	[0073.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc8
	[0073.624] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.625] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17c04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRLNSR.TTF", cAlternateFileName="")) returned 1
	[0073.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fcc
	[0073.625] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.625] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xebd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BROADW.TTF", cAlternateFileName="")) returned 1
	[0073.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fd0
	[0073.626] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.626] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87910bb6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd0d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRUSHSCI.TTF", cAlternateFileName="")) returned 1
	[0073.626] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fd4
	[0073.627] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.627] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd48c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BSSYM7.TTF", cAlternateFileName="")) returned 1
	[0073.627] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fd8
	[0073.627] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.628] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb91b4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CalibriL.ttf", cAlternateFileName="")) returned 1
	[0073.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fdc
	[0073.628] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.628] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CalibriLI.ttf", cAlternateFileName="CALIBR~1.TTF")) returned 1
	[0073.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fe0
	[0073.629] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.629] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13aec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALIFB.TTF", cAlternateFileName="")) returned 1
	[0073.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fe4
	[0073.630] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.630] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x181bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALIFI.TTF", cAlternateFileName="")) returned 1
	[0073.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fe8
	[0073.630] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.631] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19b54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALIFR.TTF", cAlternateFileName="")) returned 1
	[0073.631] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fec
	[0073.631] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.632] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13914, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALIST.TTF", cAlternateFileName="")) returned 1
	[0073.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ff0
	[0073.632] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.632] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f3ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f3ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALISTB.TTF", cAlternateFileName="")) returned 1
	[0073.632] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ff4
	[0073.633] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.633] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14be0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALISTBI.TTF", cAlternateFileName="")) returned 1
	[0073.633] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.633] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ff8
	[0073.634] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.634] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CALISTI.TTF", cAlternateFileName="")) returned 1
	[0073.634] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ffc
	[0073.634] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.635] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CASTELAR.TTF", cAlternateFileName="")) returned 1
	[0073.635] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6004
	[0073.635] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.635] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CENSCBK.TTF", cAlternateFileName="")) returned 1
	[0073.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6008
	[0073.636] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.636] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14348, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CENTAUR.TTF", cAlternateFileName="")) returned 1
	[0073.636] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x600c
	[0073.637] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.637] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28580, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CENTURY.TTF", cAlternateFileName="")) returned 1
	[0073.637] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6010
	[0073.637] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.639] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87805b03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x178c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHILLER.TTF", cAlternateFileName="")) returned 1
	[0073.639] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6014
	[0073.640] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.640] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd6a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COLONNA.TTF", cAlternateFileName="")) returned 1
	[0073.640] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6018
	[0073.640] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.641] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COOPBL.TTF", cAlternateFileName="")) returned 1
	[0073.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.641] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x601c
	[0073.641] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.641] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf070, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COPRGTB.TTF", cAlternateFileName="")) returned 1
	[0073.641] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6020
	[0073.642] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.642] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf4fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COPRGTL.TTF", cAlternateFileName="")) returned 1
	[0073.642] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6024
	[0073.643] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.643] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CURLZ___.TTF", cAlternateFileName="")) returned 1
	[0073.643] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.643] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6028
	[0073.643] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.644] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ELEPHNT.TTF", cAlternateFileName="")) returned 1
	[0073.644] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x602c
	[0073.644] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.645] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8763be45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd434, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ELEPHNTI.TTF", cAlternateFileName="")) returned 1
	[0073.645] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6030
	[0073.645] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.646] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc268, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENGR.TTF", cAlternateFileName="")) returned 1
	[0073.646] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6034
	[0073.646] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.647] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe0a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ERASBD.TTF", cAlternateFileName="")) returned 1
	[0073.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6038
	[0073.647] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.647] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f610cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86f610cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87282225, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ERASDEMI.TTF", cAlternateFileName="")) returned 1
	[0073.647] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x603c
	[0073.648] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.648] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895d1c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10c30, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ERASLGHT.TTF", cAlternateFileName="")) returned 1
	[0073.648] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6040
	[0073.649] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.649] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xed64, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ERASMD.TTF", cAlternateFileName="")) returned 1
	[0073.649] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6044
	[0073.649] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.650] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb380, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FELIXTI.TTF", cAlternateFileName="")) returned 1
	[0073.740] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6048
	[0073.741] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.741] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf150, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FORTE.TTF", cAlternateFileName="")) returned 1
	[0073.741] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x604c
	[0073.742] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.742] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2547c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRABK.TTF", cAlternateFileName="")) returned 1
	[0073.742] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6050
	[0073.743] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.743] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29694, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRABKIT.TTF", cAlternateFileName="")) returned 1
	[0073.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6054
	[0073.744] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.744] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22e54, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRADM.TTF", cAlternateFileName="")) returned 1
	[0073.744] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6058
	[0073.745] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.745] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c8cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRADMCN.TTF", cAlternateFileName="")) returned 1
	[0073.745] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x605c
	[0073.746] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.746] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRADMIT.TTF", cAlternateFileName="")) returned 1
	[0073.746] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6060
	[0073.748] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.748] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRAHV.TTF", cAlternateFileName="")) returned 1
	[0073.748] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6064
	[0073.749] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.749] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c7c1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c7c1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2547c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRAHVIT.TTF", cAlternateFileName="")) returned 1
	[0073.749] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6068
	[0073.751] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.752] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8910d01a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8910d01a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRAMDCN.TTF", cAlternateFileName="")) returned 1
	[0073.752] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x606c
	[0073.752] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.753] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x110f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FREESCPT.TTF", cAlternateFileName="")) returned 1
	[0073.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6070
	[0073.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.754] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895d1c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe4d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FRSCRIPT.TTF", cAlternateFileName="")) returned 1
	[0073.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6074
	[0073.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.755] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895f7d89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1467c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FTLTLT.TTF", cAlternateFileName="")) returned 1
	[0073.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6078
	[0073.756] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.756] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b88e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GABRIOLA.TTF", cAlternateFileName="")) returned 1
	[0073.756] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x607c
	[0073.757] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.757] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x337e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GADUGI.TTF", cAlternateFileName="")) returned 1
	[0073.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6080
	[0073.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.758] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3328c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GADUGIB.TTF", cAlternateFileName="")) returned 1
	[0073.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6084
	[0073.759] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.759] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x305b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GARA.TTF", cAlternateFileName="")) returned 1
	[0073.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6088
	[0073.760] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.760] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8910d01a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8910d01a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30c5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GARABD.TTF", cAlternateFileName="")) returned 1
	[0073.760] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x608c
	[0073.761] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.761] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e418, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GARAIT.TTF", cAlternateFileName="")) returned 1
	[0073.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6090
	[0073.762] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.762] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22af8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIGI.TTF", cAlternateFileName="")) returned 1
	[0073.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6094
	[0073.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.764] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11748, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GILBI___.TTF", cAlternateFileName="")) returned 1
	[0073.764] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6098
	[0073.765] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.765] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87b4cd70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10ad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GILB____.TTF", cAlternateFileName="")) returned 1
	[0073.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x609c
	[0073.766] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.766] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a8e187, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a8e187, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeba0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GILC____.TTF", cAlternateFileName="")) returned 1
	[0073.767] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60a0
	[0073.767] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.768] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ab4411, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ab4411, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10f3c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GILI____.TTF", cAlternateFileName="")) returned 1
	[0073.768] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60a4
	[0073.768] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.769] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ad8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GILLUBCD.TTF", cAlternateFileName="")) returned 1
	[0073.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60a8
	[0073.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.770] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11db0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GILSANUB.TTF", cAlternateFileName="")) returned 1
	[0073.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60ac
	[0073.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.771] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10758, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIL_____.TTF", cAlternateFileName="")) returned 1
	[0073.771] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60b0
	[0073.772] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.772] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11be4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GLECB.TTF", cAlternateFileName="")) returned 1
	[0073.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60b4
	[0073.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.773] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14abc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GLSNECB.TTF", cAlternateFileName="")) returned 1
	[0073.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60b8
	[0073.774] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.774] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8947a735, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21960, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOTHIC.TTF", cAlternateFileName="")) returned 1
	[0073.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60bc
	[0073.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.775] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOTHICB.TTF", cAlternateFileName="")) returned 1
	[0073.775] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c0
	[0073.776] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.776] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21f4c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOTHICBI.TTF", cAlternateFileName="")) returned 1
	[0073.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c4
	[0073.777] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.777] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24428, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOTHICI.TTF", cAlternateFileName="")) returned 1
	[0073.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c8
	[0073.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.834] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13de0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOUDOS.TTF", cAlternateFileName="")) returned 1
	[0073.834] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60cc
	[0073.835] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.835] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1436c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOUDOSB.TTF", cAlternateFileName="")) returned 1
	[0073.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60d0
	[0073.838] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.838] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13998, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOUDOSI.TTF", cAlternateFileName="")) returned 1
	[0073.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60d4
	[0073.839] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.839] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c72585, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c72585, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89690720, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GOUDYSTO.TTF", cAlternateFileName="")) returned 1
	[0073.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60d8
	[0073.840] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.840] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdd14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HARLOWSI.TTF", cAlternateFileName="")) returned 1
	[0073.840] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60dc
	[0073.841] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.841] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11328, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HARNGTON.TTF", cAlternateFileName="")) returned 1
	[0073.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60e0
	[0073.842] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.842] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HATTEN.TTF", cAlternateFileName="")) returned 1
	[0073.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60e4
	[0073.843] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.843] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HTOWERT.TTF", cAlternateFileName="")) returned 1
	[0073.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.844] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60e8
	[0073.844] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.844] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x123d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HTOWERTI.TTF", cAlternateFileName="")) returned 1
	[0073.844] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60ec
	[0073.845] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.845] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xec48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IMPRISHA.TTF", cAlternateFileName="")) returned 1
	[0073.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60f0
	[0073.848] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.848] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x124d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INFROMAN.TTF", cAlternateFileName="")) returned 1
	[0073.849] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60f4
	[0073.849] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.849] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20514, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ITCBLKAD.TTF", cAlternateFileName="")) returned 1
	[0073.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60f8
	[0073.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.850] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ITCEDSCR.TTF", cAlternateFileName="")) returned 1
	[0073.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60fc
	[0073.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.851] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe940, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ITCKRIST.TTF", cAlternateFileName="")) returned 1
	[0073.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6100
	[0073.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.853] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11078, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JOKERMAN.TTF", cAlternateFileName="")) returned 1
	[0073.853] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6104
	[0073.853] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.854] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf5a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JUICE___.TTF", cAlternateFileName="")) returned 1
	[0073.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6108
	[0073.854] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.855] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf7a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="KUNSTLER.TTF", cAlternateFileName="")) returned 1
	[0073.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x610c
	[0073.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.856] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LATINWD.TTF", cAlternateFileName="")) returned 1
	[0073.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6110
	[0073.857] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.858] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1145c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LBRITE.TTF", cAlternateFileName="")) returned 1
	[0073.858] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6114
	[0073.858] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.859] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x104a4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LBRITED.TTF", cAlternateFileName="")) returned 1
	[0073.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6118
	[0073.860] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.860] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8936f68c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11720, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LBRITEDI.TTF", cAlternateFileName="")) returned 1
	[0073.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x611c
	[0073.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.861] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c79ac7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c79ac7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11558, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LBRITEI.TTF", cAlternateFileName="")) returned 1
	[0073.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6120
	[0073.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.862] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86e2fdc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86e2fdc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ff9a7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd8a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LCALLIG.TTF", cAlternateFileName="")) returned 1
	[0073.862] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6124
	[0073.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.863] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88a0d71e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88a0d71e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16f70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LEELAWAD.TTF", cAlternateFileName="")) returned 1
	[0073.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6128
	[0073.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.864] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16e8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LEELAWDB.TTF", cAlternateFileName="")) returned 1
	[0073.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x612c
	[0073.865] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.865] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf1d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LFAX.TTF", cAlternateFileName="")) returned 1
	[0073.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6130
	[0073.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.866] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf294, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LFAXD.TTF", cAlternateFileName="")) returned 1
	[0073.866] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6134
	[0073.867] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.867] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11730, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LFAXDI.TTF", cAlternateFileName="")) returned 1
	[0073.867] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6138
	[0073.868] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.869] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c602ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1075c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LFAXI.TTF", cAlternateFileName="")) returned 1
	[0073.869] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x613c
	[0073.869] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.870] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf414, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LHANDW.TTF", cAlternateFileName="")) returned 1
	[0073.870] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6140
	[0073.870] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.871] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LSANS.TTF", cAlternateFileName="")) returned 1
	[0073.871] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6144
	[0073.872] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.872] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xea48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LSANSD.TTF", cAlternateFileName="")) returned 1
	[0073.872] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6148
	[0073.921] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.922] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10310, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LSANSDI.TTF", cAlternateFileName="")) returned 1
	[0073.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x614c
	[0073.922] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.923] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LSANSI.TTF", cAlternateFileName="")) returned 1
	[0073.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6150
	[0073.923] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.923] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdab0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTYPE.TTF", cAlternateFileName="")) returned 1
	[0073.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6154
	[0073.924] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.924] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xce84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTYPEB.TTF", cAlternateFileName="")) returned 1
	[0073.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6158
	[0073.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.927] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd55c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTYPEBO.TTF", cAlternateFileName="")) returned 1
	[0073.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x615c
	[0073.928] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.928] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff84, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LTYPEO.TTF", cAlternateFileName="")) returned 1
	[0073.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6160
	[0073.929] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.929] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff04, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAGNETOB.TTF", cAlternateFileName="")) returned 1
	[0073.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6164
	[0073.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.930] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefc8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MAIAN.TTF", cAlternateFileName="")) returned 1
	[0073.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6168
	[0073.931] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.931] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MATURASC.TTF", cAlternateFileName="")) returned 1
	[0073.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x616c
	[0073.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.932] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89ddda54, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ece4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MISTRAL.TTF", cAlternateFileName="")) returned 1
	[0073.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6170
	[0073.933] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.933] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86eee9a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86eee9a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86f3ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf494, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MOD20.TTF", cAlternateFileName="")) returned 1
	[0073.933] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6174
	[0073.934] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.934] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88594fb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88594fb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1450d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSJH.TTC", cAlternateFileName="")) returned 1
	[0073.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6178
	[0073.936] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.936] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88594fb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88594fb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdadb70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSJHBD.TTC", cAlternateFileName="")) returned 1
	[0073.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x617c
	[0073.937] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.937] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x885bb26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x885bb26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x894a08cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3834c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSUIGHUB.TTF", cAlternateFileName="")) returned 1
	[0073.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6180
	[0073.938] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.938] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x365a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSUIGHUR.TTF", cAlternateFileName="")) returned 1
	[0073.938] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6184
	[0073.939] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.939] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x890e6d42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x890e6d42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x896442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x148ba90, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSYH.TTC", cAlternateFileName="")) returned 1
	[0073.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6188
	[0073.940] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.940] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdb7230, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSYHBD.TTC", cAlternateFileName="")) returned 1
	[0073.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618c
	[0073.941] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.941] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x266b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MTCORSVA.TTF", cAlternateFileName="")) returned 1
	[0073.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6190
	[0073.942] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.942] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x176a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NIAGENG.TTF", cAlternateFileName="")) returned 1
	[0073.943] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6194
	[0073.943] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.944] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1211c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NIAGSOL.TTF", cAlternateFileName="")) returned 1
	[0073.944] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6198
	[0073.944] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.945] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1484ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NIRMALA.TTF", cAlternateFileName="")) returned 1
	[0073.945] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x619c
	[0073.945] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.946] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c640, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NIRMALAB.TTF", cAlternateFileName="")) returned 1
	[0073.946] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61a0
	[0073.946] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.947] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd868, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OCRAEXT.TTF", cAlternateFileName="")) returned 1
	[0073.947] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61a4
	[0073.949] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.949] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16b8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OLDENGL.TTF", cAlternateFileName="")) returned 1
	[0073.950] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61a8
	[0073.951] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.951] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13c94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ONYX.TTF", cAlternateFileName="")) returned 1
	[0073.951] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61ac
	[0073.952] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.952] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4508, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OUTLOOK.TTF", cAlternateFileName="")) returned 1
	[0073.952] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61b0
	[0073.953] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.953] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PALSCRI.TTF", cAlternateFileName="")) returned 1
	[0073.954] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61b4
	[0073.954] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.955] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27e94, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAPYRUS.TTF", cAlternateFileName="")) returned 1
	[0073.955] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61b8
	[0073.955] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.956] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24ed8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PARCHM.TTF", cAlternateFileName="")) returned 1
	[0073.956] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61bc
	[0073.957] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.957] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12764, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PERBI___.TTF", cAlternateFileName="")) returned 1
	[0073.957] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c0
	[0073.958] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.958] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe490, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PERB____.TTF", cAlternateFileName="")) returned 1
	[0073.958] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c4
	[0073.959] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.959] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12930, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PERI____.TTF", cAlternateFileName="")) returned 1
	[0073.959] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c8
	[0073.960] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.960] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PERTIBD.TTF", cAlternateFileName="")) returned 1
	[0073.960] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61cc
	[0073.961] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.961] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xab18, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PERTILI.TTF", cAlternateFileName="")) returned 1
	[0073.962] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61d0
	[0073.962] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.963] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8913323b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x895f7d89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb38, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PER_____.TTF", cAlternateFileName="")) returned 1
	[0073.963] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61d4
	[0073.963] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.964] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x879f59bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x879f59bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87feb6a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb454, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PLAYBILL.TTF", cAlternateFileName="")) returned 1
	[0073.964] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61d8
	[0073.965] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0073.965] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87a1bac5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87a1bac5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8829a0da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12b2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="POORICH.TTF", cAlternateFileName="")) returned 1
	[0073.965] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0073.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61dc
	[0073.966] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.033] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c13f97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PRISTINA.TTF", cAlternateFileName="")) returned 1
	[0074.034] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61e0
	[0074.035] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.035] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c13f97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RAGE.TTF", cAlternateFileName="")) returned 1
	[0074.035] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61e4
	[0074.036] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.037] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87ada680, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87ada680, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x122b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RAVIE.TTF", cAlternateFileName="")) returned 1
	[0074.037] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61e8
	[0074.037] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.038] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x35c0c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REFSAN.TTF", cAlternateFileName="")) returned 1
	[0074.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61ec
	[0074.038] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.038] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REFSPCL.TTF", cAlternateFileName="")) returned 1
	[0074.038] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61f0
	[0074.039] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.040] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe834, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCCB___.TTF", cAlternateFileName="")) returned 1
	[0074.040] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61f4
	[0074.040] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.041] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c3a0a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda10, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCC____.TTF", cAlternateFileName="")) returned 1
	[0074.041] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61f8
	[0074.041] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.041] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89c86544, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11a50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCK.TTF", cAlternateFileName="")) returned 1
	[0074.042] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61fc
	[0074.042] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.042] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c7ae78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c7ae78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10cac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCKB.TTF", cAlternateFileName="")) returned 1
	[0074.043] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6200
	[0074.043] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.044] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x87b72fc9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x87b72fc9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11fe4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCKBI.TTF", cAlternateFileName="")) returned 1
	[0074.044] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6204
	[0074.045] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.045] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x889e7568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x889e7568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89395811, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc010, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCKEB.TTF", cAlternateFileName="")) returned 1
	[0074.045] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6208
	[0074.046] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.046] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88594fb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88594fb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8909a9cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12bd4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ROCKI.TTF", cAlternateFileName="")) returned 1
	[0074.046] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x620c
	[0074.047] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.047] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c74cba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c74cba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89690720, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29334, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHLBKB.TTF", cAlternateFileName="")) returned 1
	[0074.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6210
	[0074.048] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.048] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c76063, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c76063, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x89690720, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x274c4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHLBKBI.TTF", cAlternateFileName="")) returned 1
	[0074.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6214
	[0074.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.049] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88c78740, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88c78740, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8966a531, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27d5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCHLBKI.TTF", cAlternateFileName="")) returned 1
	[0074.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6218
	[0074.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.050] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868f8b70, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868f8b70, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd8cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SCRIPTBL.TTF", cAlternateFileName="")) returned 1
	[0074.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x621c
	[0074.050] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.050] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a500ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x97e0c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SEGOEUISL.TTF", cAlternateFileName="SEGOEU~1.TTF")) returned 1
	[0074.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6220
	[0074.051] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.051] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a9c5a1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcc5c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SHOWG.TTF", cAlternateFileName="")) returned 1
	[0074.051] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6224
	[0074.052] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.052] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a500ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf6dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SNAP____.TTF", cAlternateFileName="")) returned 1
	[0074.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6228
	[0074.054] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.055] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd92c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STENCIL.TTF", cAlternateFileName="")) returned 1
	[0074.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x622c
	[0074.055] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.055] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868f8b70, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868f8b70, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12080, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCBI____.TTF", cAlternateFileName="")) returned 1
	[0074.055] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6230
	[0074.056] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.056] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a500ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x123a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCB_____.TTF", cAlternateFileName="")) returned 1
	[0074.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6234
	[0074.057] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.057] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a500ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x101e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCCB____.TTF", cAlternateFileName="")) returned 1
	[0074.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6238
	[0074.057] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a500ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x123d4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCCEB.TTF", cAlternateFileName="")) returned 1
	[0074.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x623c
	[0074.058] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.058] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868f8b70, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868f8b70, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e2fdc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x104f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCCM____.TTF", cAlternateFileName="")) returned 1
	[0074.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6240
	[0074.059] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.059] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868f8b70, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868f8b70, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1319c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCMI____.TTF", cAlternateFileName="")) returned 1
	[0074.059] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6244
	[0074.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.127] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868f8b70, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868f8b70, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x129dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TCM_____.TTF", cAlternateFileName="")) returned 1
	[0074.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6248
	[0074.128] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.128] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12944, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TEMPSITC.TTF", cAlternateFileName="")) returned 1
	[0074.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624c
	[0074.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.129] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868f8b70, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868f8b70, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x197b4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VINERITC.TTF", cAlternateFileName="")) returned 1
	[0074.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6250
	[0074.130] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.130] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a762bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10488, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VIVALDII.TTF", cAlternateFileName="")) returned 1
	[0074.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6254
	[0074.131] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.131] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e2fdc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd424, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VLADIMIR.TTF", cAlternateFileName="")) returned 1
	[0074.131] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6258
	[0074.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.132] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a500ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a500ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e2fdc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x100fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINGDNG2.TTF", cAlternateFileName="")) returned 1
	[0074.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x625c
	[0074.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.133] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINGDNG3.TTF", cAlternateFileName="")) returned 1
	[0074.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6260
	[0074.133] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.133] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86a29e47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a29e47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86e09b78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WINGDNG3.TTF", cAlternateFileName="")) returned 0
	[0074.133] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.134] SetLastError (dwErrCode=0x0) 
	[0074.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.136] GetLastError () returned 0x5
	[0074.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0074.136] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.136] FindNextFileW (in: hFindFile=0x274bd1fbf50, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="private", cAlternateFileName="")) returned 0
	[0074.136] FindClose (in: hFindFile=0x274bd1fbf50 | out: hFindFile=0x274bd1fbf50) returned 1
	[0074.136] SetLastError (dwErrCode=0x0) 
	[0074.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.137] GetLastError () returned 0x5
	[0074.137] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0074.137] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.137] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~3")) returned 1
	[0074.137] SetLastError (dwErrCode=0x0) 
	[0074.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.138] GetLastError () returned 0x5
	[0074.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0074.138] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0074.138] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.138] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0074.138] SetLastError (dwErrCode=0x0) 
	[0074.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.138] GetLastError () returned 0x5
	[0074.139] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0074.139] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.139] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.139] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb975fdf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.139] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1
	[0074.139] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6264
	[0074.140] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.140] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0
	[0074.140] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.141] SetLastError (dwErrCode=0x0) 
	[0074.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\designer\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.141] GetLastError () returned 0x5
	[0074.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0074.141] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.141] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0074.141] SetLastError (dwErrCode=0x0) 
	[0074.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.141] GetLastError () returned 0x5
	[0074.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0074.141] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc430
	[0074.141] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.141] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DW", cAlternateFileName="")) returned 1
	[0074.141] SetLastError (dwErrCode=0x0) 
	[0074.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.141] GetLastError () returned 0x5
	[0074.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.142] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.142] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.143] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.143] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.143] SetLastError (dwErrCode=0x0) 
	[0074.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.143] GetLastError () returned 0x5
	[0074.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.143] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbe30
	[0074.143] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf477755d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf477755d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf47e9c8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ae70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ae70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 0
	[0074.144] FindClose (in: hFindFile=0x274bd1fbe30 | out: hFindFile=0x274bd1fbe30) returned 1
	[0074.144] SetLastError (dwErrCode=0x0) 
	[0074.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.144] GetLastError () returned 0x5
	[0074.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.144] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x245fcdca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a9ed0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 0
	[0074.144] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.144] SetLastError (dwErrCode=0x0) 
	[0074.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\DW\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\dw\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.144] GetLastError () returned 0x5
	[0074.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.144] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.144] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0074.144] SetLastError (dwErrCode=0x0) 
	[0074.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.145] GetLastError () returned 0x5
	[0074.145] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.145] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.145] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.146] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.146] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.146] SetLastError (dwErrCode=0x0) 
	[0074.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.146] GetLastError () returned 0x5
	[0074.146] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.147] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.147] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0074.147] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.147] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 1
	[0074.147] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EEINTL.DLL", cAlternateFileName="")) returned 0
	[0074.147] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0074.147] SetLastError (dwErrCode=0x0) 
	[0074.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.148] GetLastError () returned 0x5
	[0074.148] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.148] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf086f11e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf086f11e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf086f11e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb9038f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb9038f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf191f881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf191f881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60f38e4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f5480d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f5480d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f7aa31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf073ddf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf073ddf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e82eb0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e82eb0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69be349, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9fabe6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9fabe6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9fabe6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0074.148] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0074.149] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8de687, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8de687, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8de687, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fd, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EQNEDT32.CNT", cAlternateFileName="")) returned 1
	[0074.149] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x626c
	[0074.149] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9d49b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb950d65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EQNEDT32.EXE", cAlternateFileName="")) returned 1
	[0074.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefccf8e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="eqnedt32.exe.manifest", cAlternateFileName="EQNEDT~1.MAN")) returned 1
	[0074.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb92ab57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb92ab57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb950d65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b0b7, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EQNEDT32.HLP", cAlternateFileName="")) returned 1
	[0074.150] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6270
	[0074.150] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.150] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x24707df7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0074.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x24707df7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0074.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0074.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9bf4d66, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9bf4d66, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x24707df7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0074.151] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86a500ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1de8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MTEXTRA.TTF", cAlternateFileName="")) returned 1
	[0074.151] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d08640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6274
	[0074.151] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0074.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0074.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0074.152] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0074.152] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.152] SetLastError (dwErrCode=0x0) 
	[0074.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.152] GetLastError () returned 0x5
	[0074.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.152] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.152] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0074.152] SetLastError (dwErrCode=0x0) 
	[0074.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.152] GetLastError () returned 0x5
	[0074.152] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.152] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.152] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.153] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.153] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99dec29, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 1
	[0074.153] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99dec29, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOEURO.DLL", cAlternateFileName="")) returned 0
	[0074.153] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.153] SetLastError (dwErrCode=0x0) 
	[0074.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EURO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\euro\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.153] GetLastError () returned 0x5
	[0074.153] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.153] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.153] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0074.153] SetLastError (dwErrCode=0x0) 
	[0074.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.153] GetLastError () returned 0x5
	[0074.153] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.153] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f779c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa6b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msgfilt.dll", cAlternateFileName="")) returned 1
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3783951, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3783951, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd386878f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13b478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="odffilt.dll", cAlternateFileName="")) returned 1
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd324c72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd324c72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd33f011b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x188470, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="offfiltx.dll", cAlternateFileName="")) returned 1
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14c6cb9, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x151316f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5d1860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 1
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14c6cb9, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x151316f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5d1860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VISFILT.DLL", cAlternateFileName="")) returned 0
	[0074.155] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.155] SetLastError (dwErrCode=0x0) 
	[0074.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Filters\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\filters\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.155] GetLastError () returned 0x5
	[0074.155] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.155] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.155] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0074.155] SetLastError (dwErrCode=0x0) 
	[0074.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.156] GetLastError () returned 0x5
	[0074.156] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.156] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.158] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.158] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb950d65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabc70, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EPSIMP32.FLT", cAlternateFileName="")) returned 1
	[0074.158] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.159] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0bd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6278
	[0074.159] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.159] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GIFIMP32.FLT", cAlternateFileName="")) returned 1
	[0074.159] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d0f3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x627c
	[0074.160] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.160] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2e1f46, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3a0b07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JPEGIM32.FLT", cAlternateFileName="")) returned 1
	[0074.160] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d12ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6280
	[0074.161] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.161] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8de687, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8de687, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb92ab57, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3adb, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.EPS", cAlternateFileName="")) returned 1
	[0074.161] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d16180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6284
	[0074.164] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.164] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.GIF", cAlternateFileName="")) returned 1
	[0074.164] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.165] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d19850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6288
	[0074.165] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.165] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb950d65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb950d65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb950d65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.JPG", cAlternateFileName="")) returned 1
	[0074.165] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.166] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d1cf20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x628c
	[0074.166] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.166] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb950d65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb950d65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb950d65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x692, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.PNG", cAlternateFileName="")) returned 1
	[0074.166] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d205f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6290
	[0074.167] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.167] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb92ab57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb92ab57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb950d65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MS.WPG", cAlternateFileName="")) returned 1
	[0074.167] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d23cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6294
	[0074.168] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.168] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PICTIM32.FLT", cAlternateFileName="")) returned 1
	[0074.168] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d27390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6298
	[0074.169] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.170] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb950d65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PNG32.FLT", cAlternateFileName="")) returned 1
	[0074.170] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2aa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x629c
	[0074.171] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.171] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42c68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 1
	[0074.171] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.172] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d2e130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62a0
	[0074.172] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.172] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42c68, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPGIMP32.FLT", cAlternateFileName="")) returned 0
	[0074.172] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.173] SetLastError (dwErrCode=0x0) 
	[0074.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.176] GetLastError () returned 0x5
	[0074.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.176] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.176] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Help", cAlternateFileName="")) returned 1
	[0074.176] SetLastError (dwErrCode=0x0) 
	[0074.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.176] GetLastError () returned 0x5
	[0074.176] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.176] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.178] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.178] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24707df7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24707df7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24707df7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x323, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Hx.HxC", cAlternateFileName="")) returned 1
	[0074.178] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d31800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62a4
	[0074.178] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.179] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24707df7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24707df7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2472e07e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Hx.HxT", cAlternateFileName="")) returned 1
	[0074.179] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d34ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62a8
	[0074.180] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.180] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1320c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxds.dll", cAlternateFileName="")) returned 1
	[0074.180] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12910b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6ce8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="HxRuntime.HxS", cAlternateFileName="HXRUNT~1.HXS")) returned 1
	[0074.180] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d385a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62ac
	[0074.181] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.181] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2472e07e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c1a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="itircl55.dll", cAlternateFileName="")) returned 1
	[0074.181] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26737b32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2675dd9a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Keywords.HxK", cAlternateFileName="")) returned 1
	[0074.181] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3bc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62b0
	[0074.181] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.182] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2675dd9a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msitss55.dll", cAlternateFileName="")) returned 1
	[0074.182] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x266c54cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x266c54cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x266c54cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NamedUrls.HxK", cAlternateFileName="NAMEDU~1.HXK")) returned 1
	[0074.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d3f340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62b4
	[0074.183] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.183] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x266c54cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x266c54cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x266c54cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NamedUrls.HxK", cAlternateFileName="NAMEDU~1.HXK")) returned 0
	[0074.183] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.184] SetLastError (dwErrCode=0x0) 
	[0074.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.186] GetLastError () returned 0x5
	[0074.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.186] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.186] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0074.186] SetLastError (dwErrCode=0x0) 
	[0074.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.186] GetLastError () returned 0x5
	[0074.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.186] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.186] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.187] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.187] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74ce8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 1
	[0074.187] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74ce8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSCDM.DLL", cAlternateFileName="")) returned 0
	[0074.187] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.187] SetLastError (dwErrCode=0x0) 
	[0074.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\MSClientDataMgr\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\msclientdatamgr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.187] GetLastError () returned 0x5
	[0074.187] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.187] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.187] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0074.187] SetLastError (dwErrCode=0x0) 
	[0074.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.188] GetLastError () returned 0x5
	[0074.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.188] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.188] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.188] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.188] SetLastError (dwErrCode=0x0) 
	[0074.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.188] GetLastError () returned 0x5
	[0074.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.188] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3a0b07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEINTL.DLL", cAlternateFileName="")) returned 1
	[0074.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaf8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEODBCI.DLL", cAlternateFileName="")) returned 1
	[0074.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1ba7093, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2878, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEWSTR.DLL", cAlternateFileName="")) returned 1
	[0074.189] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb92ab57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb92ab57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a3ff, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADO210.CHM", cAlternateFileName="")) returned 1
	[0074.189] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d42a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62bc
	[0074.190] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.190] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc584af10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc584af10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc5f72047, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26038, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ALRTINTL.DLL", cAlternateFileName="")) returned 1
	[0074.190] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc541ed37, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd37a9bb2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd447a605, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b0c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0074.190] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc56a75c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1
	[0074.190] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaed0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSSOAPR3.DLL", cAlternateFileName="")) returned 1
	[0074.191] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSFINTL.DLL", cAlternateFileName="")) returned 1
	[0074.191] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fd000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmdp32.msi", cAlternateFileName="")) returned 1
	[0074.191] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d460e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c0
	[0074.191] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.192] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45ad988, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45ad988, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x217000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmdp64.msi", cAlternateFileName="")) returned 1
	[0074.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d497b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c4
	[0074.192] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.192] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf06cb6d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf06cb6d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf06cb6d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fb000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmia32.msi", cAlternateFileName="")) returned 1
	[0074.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d4ce80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c8
	[0074.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.193] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x216000, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="osmia64.msi", cAlternateFileName="")) returned 1
	[0074.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d50550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62cc
	[0074.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.194] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb99d23b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="README.HTM", cAlternateFileName="")) returned 1
	[0074.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d53c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62d0
	[0074.195] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.195] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f8c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 1
	[0074.195] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f8c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xlsrvintl.dll", cAlternateFileName="XLSRVI~1.DLL")) returned 0
	[0074.195] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.196] SetLastError (dwErrCode=0x0) 
	[0074.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.198] GetLastError () returned 0x5
	[0074.198] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.198] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe172e9be, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22cad0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3a0d1e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91aa0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcedc0a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcedc0a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcedc0a85, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xacd8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEERR.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcedc0a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcedc0a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee75a612, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcf688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEES.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d680, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEEXCH.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x248ab822, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEEXCL.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52a98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEODBC.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEODEXL.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5098, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEODTXT.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc3e44f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc3e44f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68288, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEOLEDB.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247542da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACETXT.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9ae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEWDAT.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aa88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ACEWSS.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4511f57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd5a15b9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5a3bdf3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd7848, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ADAL.DLL", cAlternateFileName="")) returned 1
	[0074.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x247ecc35, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x247ecc35, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1
	[0074.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d572f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62b8
	[0074.199] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AIRWER.DLL", cAlternateFileName="")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a818c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a818c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3aa7b04, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb94fd84, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefdda943, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefdda943, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefdda943, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf34fd148, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0efd867, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0074.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0fbc434, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0e189f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf31b5d3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf31b5d3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf381e2b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3b191de, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x247c69f3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x248855b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c1278, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CMigrate.exe", cAlternateFileName="")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f8c60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5b22c4e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc90, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="CSISYNCCLIENT.EXE", cAlternateFileName="CSISYN~1.EXE")) returned 1
	[0074.201] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0074.201] SetLastError (dwErrCode=0x0) 
	[0074.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.202] GetLastError () returned 0x5
	[0074.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.202] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0074.202] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc461cf97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.202] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc48593e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b8840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0074.202] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5a9c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62d8
	[0074.203] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.204] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc48593e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b8840, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0074.204] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0074.204] SetLastError (dwErrCode=0x0) 
	[0074.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.204] GetLastError () returned 0x5
	[0074.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.204] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.204] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="DataModel", cAlternateFileName="DATAMO~1")) returned 1
	[0074.204] SetLastError (dwErrCode=0x0) 
	[0074.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.204] GetLastError () returned 0x5
	[0074.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.204] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0074.205] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.205] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0074.205] SetLastError (dwErrCode=0x0) 
	[0074.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.206] GetLastError () returned 0x5
	[0074.206] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.206] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.206] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="..", cAlternateFileName="")) returned 1
	[0074.215] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cd79fe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0074.215] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62e0
	[0074.216] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.216] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cd79fe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0074.216] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d5e090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62e4
	[0074.217] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.217] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1
	[0074.217] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d61760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62e8
	[0074.219] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.219] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24cd79fe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24cd79fe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cd79fe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="informix.xsl", cAlternateFileName="")) returned 1
	[0074.219] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d64e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62ec
	[0074.220] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.220] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0074.220] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d68500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62f0
	[0074.221] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.221] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24bcc96d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24cb17f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1
	[0074.221] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6bbd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62f4
	[0074.222] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.222] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d70354, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0074.222] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d6f2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62f8
	[0074.223] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.223] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0074.223] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d72970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62fc
	[0074.224] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.224] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d23fc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d23fc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d4a13c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0074.224] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d76040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6300
	[0074.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.225] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1
	[0074.225] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d79710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6304
	[0074.225] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.226] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d70354, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d70354, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="sybase.xsl", cAlternateFileName="")) returned 1
	[0074.226] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d7cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6308
	[0074.226] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.226] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1
	[0074.227] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d804b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x630c
	[0074.227] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.227] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24d4a13c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24d4a13c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24d70354, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0
	[0074.227] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.228] SetLastError (dwErrCode=0x0) 
	[0074.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.230] GetLastError () returned 0x5
	[0074.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.230] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e0c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MI1312~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b14c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d7b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.DataFeedClient.dll", cAlternateFileName="MICROS~3.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f598, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.Edm.dll", cAlternateFileName="MI5969~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaebb622, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaebb622, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc07a0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Data.Odata.dll", cAlternateFileName="MICROS~4.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa4c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Excel.AdomdClient.dll", cAlternateFileName="MI52E9~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1824c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Excel.Amo.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.Office.Excel.DataModel.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb99c21f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb99c21f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x269c0325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3958cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msmdlocal_xl.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf172f9f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf172f9f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x780cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msmgdsrv_xl.dll", cAlternateFileName="MSMGDS~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x268db502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b20c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msolap110_xl.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0074.230] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0074.230] SetLastError (dwErrCode=0x0) 
	[0074.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.231] GetLastError () returned 0x5
	[0074.231] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.231] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.231] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.232] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.232] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.232] SetLastError (dwErrCode=0x0) 
	[0074.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.232] GetLastError () returned 0x5
	[0074.232] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0) returned 0
	[0074.232] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\*.*", lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.232] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.232] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msmdsrvi_xl.rll", cAlternateFileName="MSMDSR~1.RLL")) returned 1
	[0074.232] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d83b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6314
	[0074.233] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x114ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msmdsrvi_xl.rll", cAlternateFileName="MSMDSR~1.RLL")) returned 0
	[0074.233] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.233] SetLastError (dwErrCode=0x0) 
	[0074.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.234] GetLastError () returned 0x5
	[0074.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0) returned 0
	[0074.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 0
	[0074.234] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.234] SetLastError (dwErrCode=0x0) 
	[0074.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.234] GetLastError () returned 0x5
	[0074.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c190, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="System.Spatial.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x268b52a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x306c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmlrwbin_xl.dll", cAlternateFileName="XMLRWB~1.DLL")) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x268b52a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x460c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmlrw_xl.dll", cAlternateFileName="")) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2897d905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1803ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmsrv_xl.dll", cAlternateFileName="")) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2897d905, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1803ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmsrv_xl.dll", cAlternateFileName="")) returned 0
	[0074.234] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0074.234] SetLastError (dwErrCode=0x0) 
	[0074.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.234] GetLastError () returned 0x5
	[0074.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.234] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0074.234] SetLastError (dwErrCode=0x0) 
	[0074.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.235] GetLastError () returned 0x5
	[0074.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.235] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.235] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 0
	[0074.235] FindClose (in: hFindFile=0x274bd1fc010 | out: hFindFile=0x274bd1fc010) returned 1
	[0074.235] SetLastError (dwErrCode=0x0) 
	[0074.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.235] GetLastError () returned 0x5
	[0074.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.235] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26a58c7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77e88, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28458, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EXP_PDF.DLL", cAlternateFileName="")) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c58, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="EXP_XPS.DLL", cAlternateFileName="")) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26a7ef01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26a7ef01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="FLTLDR.EXE", cAlternateFileName="")) returned 1
	[0074.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26a58c7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26a58c7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26a7ef01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x102e, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="HeartbeatConfig.xml", cAlternateFileName="HEARTB~1.XML")) returned 1
	[0074.235] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d87250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62d4
	[0074.236] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf89c6ded, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf89c6ded, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b1789b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b1840, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="IACOM2.DLL", cAlternateFileName="")) returned 1
	[0074.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7a2268a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0074.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc45f6d6d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc45f6d6d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc464322e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12cf660, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0074.236] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6246d3c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6246d3c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6293202, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc461cf97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4964386, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x475e60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc461cf97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4db6809, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5a882aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSO40UIRES.DLL", cAlternateFileName="MSO40U~1.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc46dbbd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc46dbbd8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4a6f4d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e6060, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Mso40UIwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc46dbbd8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6a9f155, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5b20c22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x921260, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSO99LRES.DLL", cAlternateFileName="MSO99L~1.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc48f1c7a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6a78ef3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5bb95a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7c3e60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Mso99Lwin32client.dll", cAlternateFileName="MSO99L~2.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26b89f63, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOICONS.EXE", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc56f3b6f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc56f3b6f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd945950a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f280, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOIDCLIL.DLL", cAlternateFileName="MSOIDC~1.DLL")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5719cee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc5719cee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd945950a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc88e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOIDRES.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x85e80ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x85e80ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e80ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8c0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOPRIV.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc493e147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6bf66e1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e3ee60, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf191f881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf191f881, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf191f881, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x151478, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d458, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOSQM.EXE", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36eafd9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOXEV.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0efd867, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26b89f63, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36648, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOXMLED.EXE", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10660, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4c8553f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4c8553f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a1125f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16e860, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSPTLS.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa06b8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MSSOAP30.DLL", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e572fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e572fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26b89f63, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43250ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43250ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43250ed, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0074.237] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bb01a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bbb, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MUAUTH.CAB", cAlternateFileName="")) returned 1
	[0074.237] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8a920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62dc
	[0074.238] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.238] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ab054a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ab054a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7288, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="MUOPTIN.DLL", cAlternateFileName="")) returned 1
	[0074.238] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 1
	[0074.238] SetLastError (dwErrCode=0x0) 
	[0074.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.238] GetLastError () returned 0x5
	[0074.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.238] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.239] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.239] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 1
	[0074.239] SetLastError (dwErrCode=0x0) 
	[0074.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.239] GetLastError () returned 0x5
	[0074.239] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.239] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0074.240] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.240] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef915def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef915def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRANDING.DLL", cAlternateFileName="")) returned 1
	[0074.240] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb950d65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb950d65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x521b9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BRANDING.XML", cAlternateFileName="")) returned 1
	[0074.240] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d8dff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x631c
	[0074.240] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.241] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8f6526, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8f6526, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3854, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSS10O.CHM", cAlternateFileName="")) returned 1
	[0074.241] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d916c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6320
	[0074.241] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.242] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3906, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PSS10R.CHM", cAlternateFileName="")) returned 1
	[0074.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d94d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6324
	[0074.242] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.242] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14366, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 1
	[0074.242] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d98460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6328
	[0074.243] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.243] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14366, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SETUP.CHM", cAlternateFileName="")) returned 0
	[0074.243] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0074.243] SetLastError (dwErrCode=0x0) 
	[0074.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.244] GetLastError () returned 0x5
	[0074.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.244] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 0
	[0074.244] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.244] SetLastError (dwErrCode=0x0) 
	[0074.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.244] GetLastError () returned 0x5
	[0074.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.244] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c40, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe261555e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dc70, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OLicenseHeartbeat.exe", cAlternateFileName="OLICEN~1.EXE")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e310c7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="OPTINPS.DLL", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3bd4d47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc3bd4d47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bfaf93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="oregres.dll", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4c8553f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc576616a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a374ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2218a8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="RICHED20.DLL", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cdf4b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cdf4b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cdf4b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="VBAJET32.DLL", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf107afe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf107afe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x290d8, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WISC30.DLL", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24eed0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WXPNSE.DLL", cAlternateFileName="")) returned 1
	[0074.244] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24eed0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="WXPNSE.DLL", cAlternateFileName="")) returned 0
	[0074.244] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.244] SetLastError (dwErrCode=0x0) 
	[0074.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.245] GetLastError () returned 0x5
	[0074.245] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.245] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.245] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0074.245] SetLastError (dwErrCode=0x0) 
	[0074.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.245] GetLastError () returned 0x5
	[0074.245] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.245] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x872b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSLID.DLL", cAlternateFileName="")) returned 1
	[0074.246] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8d02b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c67b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSWDS_EN.LEX", cAlternateFileName="")) returned 1
	[0074.246] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9bb30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6310
	[0074.247] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.247] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb9c364d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb9c364d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc85db99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60983, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSWDS_ES.LEX", cAlternateFileName="")) returned 1
	[0074.247] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d9f200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6318
	[0074.248] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.248] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb99d23b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb9c364d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 1
	[0074.248] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da28d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x632c
	[0074.248] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.249] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb99d23b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb99d23b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb9c364d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSWDS_FR.LEX", cAlternateFileName="")) returned 0
	[0074.249] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.249] SetLastError (dwErrCode=0x0) 
	[0074.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.249] GetLastError () returned 0x5
	[0074.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.249] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.249] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0074.249] SetLastError (dwErrCode=0x0) 
	[0074.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.249] GetLastError () returned 0x5
	[0074.249] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.249] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0074.251] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.251] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.251] SetLastError (dwErrCode=0x0) 
	[0074.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.251] GetLastError () returned 0x5
	[0074.251] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.251] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.251] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.251] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cc7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MCABOUT.HTM", cAlternateFileName="")) returned 1
	[0074.251] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.252] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da5fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6334
	[0074.252] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.252] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 1
	[0074.252] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STINTL.DLL", cAlternateFileName="")) returned 0
	[0074.252] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.253] SetLastError (dwErrCode=0x0) 
	[0074.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.253] GetLastError () returned 0x5
	[0074.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.253] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1bac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19c60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FDATE.DLL", cAlternateFileName="")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPERSON.DLL", cAlternateFileName="")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPLACE.DLL", cAlternateFileName="")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf49ffe0a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf49ffe0a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a98712, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FSTOCK.DLL", cAlternateFileName="")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IETAG.DLL", cAlternateFileName="")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf37f804b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf37f804b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IMCONTACT.DLL", cAlternateFileName="IMCONT~1.DLL")) returned 1
	[0074.253] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LISTS", cAlternateFileName="")) returned 1
	[0074.253] SetLastError (dwErrCode=0x0) 
	[0074.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.253] GetLastError () returned 0x5
	[0074.253] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.253] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.254] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.254] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0074.254] SetLastError (dwErrCode=0x0) 
	[0074.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.254] GetLastError () returned 0x5
	[0074.254] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.254] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.254] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0074.254] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="..", cAlternateFileName="")) returned 1
	[0074.255] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22d6, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="DATES.XML", cAlternateFileName="")) returned 1
	[0074.255] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2da9670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x633c
	[0074.255] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.256] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="PHONE.XML", cAlternateFileName="")) returned 1
	[0074.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dacd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6340
	[0074.256] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.257] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="TIME.XML", cAlternateFileName="")) returned 1
	[0074.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db0410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6344
	[0074.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.257] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x274, dwReserved1=0x8cf7a620, cFileName="TIME.XML", cAlternateFileName="")) returned 0
	[0074.258] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0074.258] SetLastError (dwErrCode=0x0) 
	[0074.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.258] GetLastError () returned 0x5
	[0074.258] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0074.258] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.258] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0074.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db3ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6338
	[0074.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.259] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 0
	[0074.259] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0074.259] SetLastError (dwErrCode=0x0) 
	[0074.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.259] GetLastError () returned 0x5
	[0074.259] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.259] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.259] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0074.259] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x120eb8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="METCONV.TXT", cAlternateFileName="")) returned 1
	[0074.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2db71b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6330
	[0074.260] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.260] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x55860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MOFL.DLL", cAlternateFileName="")) returned 1
	[0074.260] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc576616a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc578c3b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3574, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSTAG.TLB", cAlternateFileName="")) returned 1
	[0074.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dba880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6348
	[0074.261] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SmartTagInstall.exe", cAlternateFileName="SMARTT~1.EXE")) returned 0
	[0074.261] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0074.261] SetLastError (dwErrCode=0x0) 
	[0074.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.261] GetLastError () returned 0x5
	[0074.261] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.261] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.261] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0074.261] SetLastError (dwErrCode=0x0) 
	[0074.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.262] GetLastError () returned 0x5
	[0074.262] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.262] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.263] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.263] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0f23aa6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSE.EXE", cAlternateFileName="")) returned 1
	[0074.263] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0f23aa6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ba48, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OSE.EXE", cAlternateFileName="")) returned 0
	[0074.263] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.263] SetLastError (dwErrCode=0x0) 
	[0074.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Source Engine\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\source engine\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.263] GetLastError () returned 0x5
	[0074.263] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.263] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.263] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TEXTCONV", cAlternateFileName="")) returned 1
	[0074.263] SetLastError (dwErrCode=0x0) 
	[0074.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.264] GetLastError () returned 0x5
	[0074.264] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.264] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0074.264] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.264] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSCONV97.DLL", cAlternateFileName="")) returned 1
	[0074.264] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa6b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RECOVR32.CNV", cAlternateFileName="")) returned 1
	[0074.264] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dbdf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634c
	[0074.265] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.265] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32ab8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPFT532.CNV", cAlternateFileName="")) returned 1
	[0074.265] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.265] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc1620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6350
	[0074.266] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.266] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 1
	[0074.266] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.266] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2dc4cf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6354
	[0074.587] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.588] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48e58, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WPFT632.CNV", cAlternateFileName="")) returned 0
	[0074.588] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0074.588] SetLastError (dwErrCode=0x0) 
	[0074.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.588] GetLastError () returned 0x5
	[0074.588] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.589] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.589] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THEMES16", cAlternateFileName="")) returned 1
	[0074.589] SetLastError (dwErrCode=0x0) 
	[0074.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.589] GetLastError () returned 0x5
	[0074.589] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0074.589] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0074.591] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.591] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AFTRNOON", cAlternateFileName="")) returned 1
	[0074.592] SetLastError (dwErrCode=0x0) 
	[0074.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.592] GetLastError () returned 0x5
	[0074.592] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.592] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.592] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.593] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.593] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe58e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AFTRNOON.ELM", cAlternateFileName="")) returned 1
	[0074.593] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.593] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x635c
	[0074.593] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.594] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a24739, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a24739, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AFTRNOON.INF", cAlternateFileName="")) returned 1
	[0074.594] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6360
	[0074.594] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.595] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x621, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.595] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6364
	[0074.595] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.596] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.596] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6368
	[0074.596] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.597] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6292, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.597] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.607] SetLastError (dwErrCode=0x0) 
	[0074.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.607] GetLastError () returned 0x5
	[0074.607] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.607] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.607] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0074.607] SetLastError (dwErrCode=0x0) 
	[0074.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.608] GetLastError () returned 0x5
	[0074.608] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.608] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.608] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.608] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fc7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARCTIC.ELM", cAlternateFileName="")) returned 1
	[0074.608] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x636c
	[0074.609] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.609] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ARCTIC.INF", cAlternateFileName="")) returned 1
	[0074.609] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.609] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6370
	[0074.610] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.610] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.610] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6374
	[0074.611] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.611] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.611] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6378
	[0074.612] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.612] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.612] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.612] SetLastError (dwErrCode=0x0) 
	[0074.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.613] GetLastError () returned 0x5
	[0074.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.613] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.613] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0074.613] SetLastError (dwErrCode=0x0) 
	[0074.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.613] GetLastError () returned 0x5
	[0074.613] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.613] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.613] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.613] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x189be, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AXIS.ELM", cAlternateFileName="")) returned 1
	[0074.613] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x637c
	[0074.614] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.614] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bfc670, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bfc670, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bfc670, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="AXIS.INF", cAlternateFileName="")) returned 1
	[0074.614] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6380
	[0074.615] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.615] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.615] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6384
	[0074.616] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.616] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.616] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6388
	[0074.617] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.617] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8864, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.617] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.617] SetLastError (dwErrCode=0x0) 
	[0074.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.617] GetLastError () returned 0x5
	[0074.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.617] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.617] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0074.617] SetLastError (dwErrCode=0x0) 
	[0074.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.617] GetLastError () returned 0x5
	[0074.617] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.618] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.618] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0074.618] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.618] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10db7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLENDS.ELM", cAlternateFileName="")) returned 1
	[0074.618] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x638c
	[0074.619] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.619] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLENDS.INF", cAlternateFileName="")) returned 1
	[0074.619] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6390
	[0074.620] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.620] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x885, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.620] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6394
	[0074.620] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.621] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.621] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6398
	[0074.621] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.621] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5093, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.621] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0074.622] SetLastError (dwErrCode=0x0) 
	[0074.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.622] GetLastError () returned 0x5
	[0074.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.622] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.622] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0074.622] SetLastError (dwErrCode=0x0) 
	[0074.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.622] GetLastError () returned 0x5
	[0074.622] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.622] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.623] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.623] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLUECALM.ELM", cAlternateFileName="")) returned 1
	[0074.623] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x639c
	[0074.624] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.624] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLUECALM.INF", cAlternateFileName="")) returned 1
	[0074.624] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63a0
	[0074.625] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.625] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x618, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.625] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63a4
	[0074.625] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.625] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.625] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63a8
	[0074.626] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.626] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.626] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.626] SetLastError (dwErrCode=0x0) 
	[0074.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.627] GetLastError () returned 0x5
	[0074.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.627] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.627] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0074.627] SetLastError (dwErrCode=0x0) 
	[0074.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.627] GetLastError () returned 0x5
	[0074.627] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.627] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0074.628] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.628] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda86, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLUEPRNT.ELM", cAlternateFileName="")) returned 1
	[0074.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63ac
	[0074.628] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.628] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BLUEPRNT.INF", cAlternateFileName="")) returned 1
	[0074.628] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63b0
	[0074.629] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.629] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x785, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.629] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63b4
	[0074.630] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.630] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.630] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63b8
	[0074.630] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.631] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.631] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0074.631] SetLastError (dwErrCode=0x0) 
	[0074.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.631] GetLastError () returned 0x5
	[0074.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.631] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.631] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0074.631] SetLastError (dwErrCode=0x0) 
	[0074.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.631] GetLastError () returned 0x5
	[0074.631] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.631] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.631] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.753] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeafa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOLDSTRI.ELM", cAlternateFileName="")) returned 1
	[0074.753] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63bc
	[0074.753] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.754] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BOLDSTRI.INF", cAlternateFileName="")) returned 1
	[0074.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c0
	[0074.754] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.754] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd97, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.754] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c4
	[0074.755] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.755] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.755] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c8
	[0074.756] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.756] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c5d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.756] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.756] SetLastError (dwErrCode=0x0) 
	[0074.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.756] GetLastError () returned 0x5
	[0074.756] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.756] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.756] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0074.756] SetLastError (dwErrCode=0x0) 
	[0074.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.756] GetLastError () returned 0x5
	[0074.756] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.756] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0074.757] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.757] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a537, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BREEZE.ELM", cAlternateFileName="")) returned 1
	[0074.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63cc
	[0074.757] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.757] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BREEZE.INF", cAlternateFileName="")) returned 1
	[0074.757] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63d0
	[0074.758] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.758] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.758] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63d4
	[0074.759] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.759] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.759] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63d8
	[0074.760] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.760] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa90c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.760] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0074.760] SetLastError (dwErrCode=0x0) 
	[0074.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.760] GetLastError () returned 0x5
	[0074.760] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.760] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.760] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0074.760] SetLastError (dwErrCode=0x0) 
	[0074.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.761] GetLastError () returned 0x5
	[0074.761] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.761] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.761] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.761] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CANYON.ELM", cAlternateFileName="")) returned 1
	[0074.761] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63dc
	[0074.761] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.762] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CANYON.INF", cAlternateFileName="")) returned 1
	[0074.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63e0
	[0074.762] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.762] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.762] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63e4
	[0074.763] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.763] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.763] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63e8
	[0074.764] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.764] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.764] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.764] SetLastError (dwErrCode=0x0) 
	[0074.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.764] GetLastError () returned 0x5
	[0074.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.764] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.764] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0074.764] SetLastError (dwErrCode=0x0) 
	[0074.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.764] GetLastError () returned 0x5
	[0074.764] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.765] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.765] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.765] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1ba, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAPSULES.ELM", cAlternateFileName="")) returned 1
	[0074.765] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63ec
	[0074.766] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.766] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CAPSULES.INF", cAlternateFileName="")) returned 1
	[0074.766] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63f0
	[0074.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.769] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.769] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.769] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63f4
	[0074.769] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.770] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.770] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63f8
	[0074.770] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.770] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x74e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.770] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.771] SetLastError (dwErrCode=0x0) 
	[0074.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.771] GetLastError () returned 0x5
	[0074.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.771] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.771] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0074.771] SetLastError (dwErrCode=0x0) 
	[0074.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.771] GetLastError () returned 0x5
	[0074.771] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.771] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.771] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.772] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.772] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba44, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CASCADE.ELM", cAlternateFileName="")) returned 1
	[0074.772] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63fc
	[0074.772] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.773] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x262, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CASCADE.INF", cAlternateFileName="")) returned 1
	[0074.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6404
	[0074.773] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.773] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.773] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6408
	[0074.774] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.774] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.774] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640c
	[0074.775] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.775] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.775] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.775] SetLastError (dwErrCode=0x0) 
	[0074.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.775] GetLastError () returned 0x5
	[0074.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.775] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.775] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0074.775] SetLastError (dwErrCode=0x0) 
	[0074.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.775] GetLastError () returned 0x5
	[0074.775] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.775] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.776] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.776] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.776] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd613, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPASS.ELM", cAlternateFileName="")) returned 1
	[0074.776] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6410
	[0074.777] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.777] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="COMPASS.INF", cAlternateFileName="")) returned 1
	[0074.777] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6414
	[0074.778] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.778] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.778] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6418
	[0074.779] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.779] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x641c
	[0074.779] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.780] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.780] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.780] SetLastError (dwErrCode=0x0) 
	[0074.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.780] GetLastError () returned 0x5
	[0074.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.780] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.780] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0074.780] SetLastError (dwErrCode=0x0) 
	[0074.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.780] GetLastError () returned 0x5
	[0074.780] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.780] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0074.780] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.780] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONCRETE.ELM", cAlternateFileName="")) returned 1
	[0074.780] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6420
	[0074.781] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.781] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CONCRETE.INF", cAlternateFileName="")) returned 1
	[0074.781] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6424
	[0074.782] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.782] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x507, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.782] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6428
	[0074.782] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.783] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x642c
	[0074.783] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.783] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6fb3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.783] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0074.784] SetLastError (dwErrCode=0x0) 
	[0074.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.784] GetLastError () returned 0x5
	[0074.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.784] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.784] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0074.784] SetLastError (dwErrCode=0x0) 
	[0074.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.784] GetLastError () returned 0x5
	[0074.784] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.784] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.785] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.785] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x116dc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DEEPBLUE.ELM", cAlternateFileName="")) returned 1
	[0074.785] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6430
	[0074.785] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.786] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="DEEPBLUE.INF", cAlternateFileName="")) returned 1
	[0074.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6434
	[0074.786] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.786] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf75, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.786] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6438
	[0074.787] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.787] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.787] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x643c
	[0074.788] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.788] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81fd, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.788] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.788] SetLastError (dwErrCode=0x0) 
	[0074.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.788] GetLastError () returned 0x5
	[0074.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.788] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.788] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0074.788] SetLastError (dwErrCode=0x0) 
	[0074.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.788] GetLastError () returned 0x5
	[0074.788] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.789] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.789] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.789] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.789] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ECHO.ELM", cAlternateFileName="")) returned 1
	[0074.789] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6440
	[0074.789] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.790] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ECHO.INF", cAlternateFileName="")) returned 1
	[0074.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.790] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6444
	[0074.790] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.790] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.790] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6448
	[0074.791] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.791] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.791] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644c
	[0074.792] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.792] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6212, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.792] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.792] SetLastError (dwErrCode=0x0) 
	[0074.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.792] GetLastError () returned 0x5
	[0074.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.792] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.792] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0074.792] SetLastError (dwErrCode=0x0) 
	[0074.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.792] GetLastError () returned 0x5
	[0074.792] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.792] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.829] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.829] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf31, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ECLIPSE.ELM", cAlternateFileName="")) returned 1
	[0074.829] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6450
	[0074.830] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.830] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ECLIPSE.INF", cAlternateFileName="")) returned 1
	[0074.830] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6454
	[0074.830] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.831] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6458
	[0074.831] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.831] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.831] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.834] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x645c
	[0074.834] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.835] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e93, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.835] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.835] SetLastError (dwErrCode=0x0) 
	[0074.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.835] GetLastError () returned 0x5
	[0074.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.835] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.835] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0074.835] SetLastError (dwErrCode=0x0) 
	[0074.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.835] GetLastError () returned 0x5
	[0074.835] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.835] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.837] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.837] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EDGE.ELM", cAlternateFileName="")) returned 1
	[0074.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6460
	[0074.837] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.837] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EDGE.INF", cAlternateFileName="")) returned 1
	[0074.837] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6464
	[0074.838] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.838] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.838] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6468
	[0074.839] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.839] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.839] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x646c
	[0074.839] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.840] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6722, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.840] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.840] SetLastError (dwErrCode=0x0) 
	[0074.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.840] GetLastError () returned 0x5
	[0074.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.840] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0074.840] SetLastError (dwErrCode=0x0) 
	[0074.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.840] GetLastError () returned 0x5
	[0074.840] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.840] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0074.840] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.841] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12dee, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EVRGREEN.ELM", cAlternateFileName="")) returned 1
	[0074.841] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6470
	[0074.841] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.842] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x223, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EVRGREEN.INF", cAlternateFileName="")) returned 1
	[0074.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6474
	[0074.842] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.842] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b2f705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.842] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6478
	[0074.843] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.843] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b2f705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.843] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x647c
	[0074.844] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.844] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b2f705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7eb1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.844] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0074.844] SetLastError (dwErrCode=0x0) 
	[0074.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.844] GetLastError () returned 0x5
	[0074.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.844] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0074.844] SetLastError (dwErrCode=0x0) 
	[0074.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.844] GetLastError () returned 0x5
	[0074.844] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.844] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.845] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.845] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b2f705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19539, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPEDITN.ELM", cAlternateFileName="")) returned 1
	[0074.845] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6480
	[0074.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.846] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x255, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXPEDITN.INF", cAlternateFileName="")) returned 1
	[0074.846] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6484
	[0074.846] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.847] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6488
	[0074.847] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.847] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.847] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648c
	[0074.848] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.848] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed34, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.848] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.848] SetLastError (dwErrCode=0x0) 
	[0074.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.848] GetLastError () returned 0x5
	[0074.848] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.849] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.849] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ICE", cAlternateFileName="")) returned 1
	[0074.849] SetLastError (dwErrCode=0x0) 
	[0074.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.849] GetLastError () returned 0x5
	[0074.849] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.849] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.849] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0074.850] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.850] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ba1ded, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x109d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ICE.ELM", cAlternateFileName="")) returned 1
	[0074.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6490
	[0074.850] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.850] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ad, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ICE.INF", cAlternateFileName="")) returned 1
	[0074.850] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6494
	[0074.851] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.851] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.851] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6498
	[0074.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.852] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.852] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x649c
	[0074.852] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.853] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4981, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.853] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0074.853] SetLastError (dwErrCode=0x0) 
	[0074.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.853] GetLastError () returned 0x5
	[0074.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.853] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.853] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0074.853] SetLastError (dwErrCode=0x0) 
	[0074.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.853] GetLastError () returned 0x5
	[0074.853] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.853] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.854] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.854] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184e9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INDUST.ELM", cAlternateFileName="")) returned 1
	[0074.854] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64a0
	[0074.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.855] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x225, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="INDUST.INF", cAlternateFileName="")) returned 1
	[0074.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64a4
	[0074.855] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.856] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64a8
	[0074.856] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.856] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.856] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64ac
	[0074.857] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.857] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8317, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.857] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.858] SetLastError (dwErrCode=0x0) 
	[0074.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.858] GetLastError () returned 0x5
	[0074.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.858] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.858] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0074.858] SetLastError (dwErrCode=0x0) 
	[0074.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.858] GetLastError () returned 0x5
	[0074.858] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.858] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0074.859] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.859] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1015d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IRIS.ELM", cAlternateFileName="")) returned 1
	[0074.859] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64b0
	[0074.859] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.860] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b5591d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IRIS.INF", cAlternateFileName="")) returned 1
	[0074.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64b4
	[0074.860] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.860] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.860] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64b8
	[0074.861] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.861] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b5591d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.861] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64bc
	[0074.862] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.862] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b5591d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c1d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.862] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0074.862] SetLastError (dwErrCode=0x0) 
	[0074.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.862] GetLastError () returned 0x5
	[0074.862] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.862] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.862] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0074.862] SetLastError (dwErrCode=0x0) 
	[0074.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.862] GetLastError () returned 0x5
	[0074.863] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.863] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.863] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.863] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.863] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b5591d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JOURNAL.ELM", cAlternateFileName="")) returned 1
	[0074.863] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c0
	[0074.863] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.864] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b5591d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b5591d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="JOURNAL.INF", cAlternateFileName="")) returned 1
	[0074.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c4
	[0074.864] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.864] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.864] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c8
	[0074.865] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.865] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ba1ded, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.865] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64cc
	[0074.866] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.866] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ba1ded, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.866] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.866] SetLastError (dwErrCode=0x0) 
	[0074.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.866] GetLastError () returned 0x5
	[0074.866] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.867] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.867] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0074.867] SetLastError (dwErrCode=0x0) 
	[0074.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.867] GetLastError () returned 0x5
	[0074.867] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.867] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.867] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbe30
	[0074.903] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.903] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27ba1ded, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe743, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LAYERS.ELM", cAlternateFileName="")) returned 1
	[0074.903] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64d0
	[0074.904] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.904] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x215, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LAYERS.INF", cAlternateFileName="")) returned 1
	[0074.904] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64d4
	[0074.905] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.905] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.905] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64d8
	[0074.905] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.906] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64dc
	[0074.906] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.906] FindNextFileW (in: hFindFile=0x274bd1fbe30, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf32, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.906] FindClose (in: hFindFile=0x274bd1fbe30 | out: hFindFile=0x274bd1fbe30) returned 1
	[0074.907] SetLastError (dwErrCode=0x0) 
	[0074.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.907] GetLastError () returned 0x5
	[0074.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.907] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.907] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0074.907] SetLastError (dwErrCode=0x0) 
	[0074.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.907] GetLastError () returned 0x5
	[0074.907] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.907] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0074.907] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.907] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2ec, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LEVEL.ELM", cAlternateFileName="")) returned 1
	[0074.907] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64e0
	[0074.908] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.908] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="LEVEL.INF", cAlternateFileName="")) returned 1
	[0074.908] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64e4
	[0074.908] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.909] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x563, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64e8
	[0074.909] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.909] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.909] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64ec
	[0074.910] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.910] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbf3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.910] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0074.910] SetLastError (dwErrCode=0x0) 
	[0074.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.910] GetLastError () returned 0x5
	[0074.910] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.910] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.910] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0074.910] SetLastError (dwErrCode=0x0) 
	[0074.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.911] GetLastError () returned 0x5
	[0074.911] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.911] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.912] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.912] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc649, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK.ELM", cAlternateFileName="")) returned 1
	[0074.912] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64f0
	[0074.912] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.913] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="NETWORK.INF", cAlternateFileName="")) returned 1
	[0074.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64f4
	[0074.913] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.913] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x554, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.913] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64f8
	[0074.914] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.914] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.914] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64fc
	[0074.915] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.915] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d35, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.915] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.915] SetLastError (dwErrCode=0x0) 
	[0074.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.915] GetLastError () returned 0x5
	[0074.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.915] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.915] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0074.915] SetLastError (dwErrCode=0x0) 
	[0074.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.915] GetLastError () returned 0x5
	[0074.915] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.916] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0074.916] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.916] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x166d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAPYRUS.ELM", cAlternateFileName="")) returned 1
	[0074.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6500
	[0074.917] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.917] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PAPYRUS.INF", cAlternateFileName="")) returned 1
	[0074.917] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6504
	[0074.918] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.918] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.918] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6508
	[0074.918] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.919] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.919] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650c
	[0074.920] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.920] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.920] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0074.920] SetLastError (dwErrCode=0x0) 
	[0074.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.920] GetLastError () returned 0x5
	[0074.920] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.920] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.920] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0074.920] SetLastError (dwErrCode=0x0) 
	[0074.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.920] GetLastError () returned 0x5
	[0074.920] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.921] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.921] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbef0
	[0074.921] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.921] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PIXEL.ELM", cAlternateFileName="")) returned 1
	[0074.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6510
	[0074.921] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.921] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PIXEL.INF", cAlternateFileName="")) returned 1
	[0074.921] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6514
	[0074.922] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.922] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.922] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6518
	[0074.923] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.923] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.923] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x651c
	[0074.923] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.924] FindNextFileW (in: hFindFile=0x274bd1fbef0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.924] FindClose (in: hFindFile=0x274bd1fbef0 | out: hFindFile=0x274bd1fbef0) returned 1
	[0074.924] SetLastError (dwErrCode=0x0) 
	[0074.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.924] GetLastError () returned 0x5
	[0074.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.924] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.924] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0074.924] SetLastError (dwErrCode=0x0) 
	[0074.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.924] GetLastError () returned 0x5
	[0074.924] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.924] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.924] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0074.925] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.925] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.925] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6520
	[0074.926] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.926] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb20e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROFILE.ELM", cAlternateFileName="")) returned 1
	[0074.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6524
	[0074.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.927] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PROFILE.INF", cAlternateFileName="")) returned 1
	[0074.927] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6528
	[0074.927] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.928] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.928] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x652c
	[0074.928] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.928] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4162, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.929] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0074.929] SetLastError (dwErrCode=0x0) 
	[0074.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.929] GetLastError () returned 0x5
	[0074.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.929] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.929] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0074.929] SetLastError (dwErrCode=0x0) 
	[0074.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.929] GetLastError () returned 0x5
	[0074.929] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.929] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.929] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.929] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.929] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6530
	[0074.930] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.930] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbba7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QUAD.ELM", cAlternateFileName="")) returned 1
	[0074.930] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6534
	[0074.931] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.931] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x258, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="QUAD.INF", cAlternateFileName="")) returned 1
	[0074.931] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6538
	[0074.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.932] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.932] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x653c
	[0074.932] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.933] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90f8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.933] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.933] SetLastError (dwErrCode=0x0) 
	[0074.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.933] GetLastError () returned 0x5
	[0074.933] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.933] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.933] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0074.933] SetLastError (dwErrCode=0x0) 
	[0074.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.933] GetLastError () returned 0x5
	[0074.933] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.933] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.933] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0074.934] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.934] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x682, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.934] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6540
	[0074.935] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.935] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb75e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RADIAL.ELM", cAlternateFileName="")) returned 1
	[0074.935] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf0690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6544
	[0074.936] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.936] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RADIAL.INF", cAlternateFileName="")) returned 1
	[0074.936] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf3d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6548
	[0074.937] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.937] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.937] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cf7430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654c
	[0074.937] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.938] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.938] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0074.938] SetLastError (dwErrCode=0x0) 
	[0074.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.938] GetLastError () returned 0x5
	[0074.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.938] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.938] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0074.938] SetLastError (dwErrCode=0x0) 
	[0074.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.938] GetLastError () returned 0x5
	[0074.938] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.938] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.938] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.938] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.938] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6550
	[0074.939] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.939] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb30e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REFINED.ELM", cAlternateFileName="")) returned 1
	[0074.939] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cfe1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6554
	[0074.940] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.940] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="REFINED.INF", cAlternateFileName="")) returned 1
	[0074.940] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d018a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6558
	[0074.941] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.941] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.941] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2d04f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x655c
	[0074.941] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.942] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d79, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.942] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.942] SetLastError (dwErrCode=0x0) 
	[0074.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.942] GetLastError () returned 0x5
	[0074.942] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.942] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.942] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0074.942] SetLastError (dwErrCode=0x0) 
	[0074.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.942] GetLastError () returned 0x5
	[0074.942] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.942] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.942] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0074.980] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.980] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf82, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.981] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6560
	[0074.981] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.982] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1205e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RICEPAPR.ELM", cAlternateFileName="")) returned 1
	[0074.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6564
	[0074.982] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.982] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RICEPAPR.INF", cAlternateFileName="")) returned 1
	[0074.982] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6568
	[0074.983] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.983] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.983] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x656c
	[0074.984] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.984] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf7b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.984] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0074.984] SetLastError (dwErrCode=0x0) 
	[0074.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.984] GetLastError () returned 0x5
	[0074.984] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.984] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.984] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0074.984] SetLastError (dwErrCode=0x0) 
	[0074.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.985] GetLastError () returned 0x5
	[0074.985] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.985] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.985] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa2c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6570
	[0074.986] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.986] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x101e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RIPPLE.ELM", cAlternateFileName="")) returned 1
	[0074.986] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6574
	[0074.987] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.987] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RIPPLE.INF", cAlternateFileName="")) returned 1
	[0074.987] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6578
	[0074.988] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.988] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.988] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x657c
	[0074.988] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.989] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.989] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.989] SetLastError (dwErrCode=0x0) 
	[0074.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.989] GetLastError () returned 0x5
	[0074.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.989] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.989] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0074.989] SetLastError (dwErrCode=0x0) 
	[0074.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.989] GetLastError () returned 0x5
	[0074.989] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.989] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.989] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0074.989] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.990] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6580
	[0074.990] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.990] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11e37, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RMNSQUE.ELM", cAlternateFileName="")) returned 1
	[0074.990] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6584
	[0074.991] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.991] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="RMNSQUE.INF", cAlternateFileName="")) returned 1
	[0074.991] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6588
	[0074.992] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.992] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.992] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658c
	[0074.993] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.993] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb5a, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.993] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0074.993] SetLastError (dwErrCode=0x0) 
	[0074.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.993] GetLastError () returned 0x5
	[0074.993] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.993] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.993] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0074.993] SetLastError (dwErrCode=0x0) 
	[0074.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.994] GetLastError () returned 0x5
	[0074.994] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.994] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.994] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0074.995] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.995] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x289576aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0074.995] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6590
	[0074.996] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.996] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x28551719, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1936f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SATIN.ELM", cAlternateFileName="")) returned 1
	[0074.996] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6594
	[0074.996] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.996] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SATIN.INF", cAlternateFileName="")) returned 1
	[0074.997] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6598
	[0074.997] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0074.998] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0074.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x659c
	[0074.998] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0074.998] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8573, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0074.998] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0074.999] SetLastError (dwErrCode=0x0) 
	[0074.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.999] GetLastError () returned 0x5
	[0074.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.999] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.999] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKY", cAlternateFileName="")) returned 1
	[0074.999] SetLastError (dwErrCode=0x0) 
	[0074.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.999] GetLastError () returned 0x5
	[0074.999] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0074.999] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0074.999] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.000] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.000] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.000] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65a0
	[0075.000] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.001] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1413d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKY.ELM", cAlternateFileName="")) returned 1
	[0075.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65a4
	[0075.001] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.001] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SKY.INF", cAlternateFileName="")) returned 1
	[0075.001] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65a8
	[0075.002] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.002] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.002] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65ac
	[0075.002] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.003] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7279, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.003] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.003] SetLastError (dwErrCode=0x0) 
	[0075.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.003] GetLastError () returned 0x5
	[0075.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.003] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.003] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0075.003] SetLastError (dwErrCode=0x0) 
	[0075.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.003] GetLastError () returned 0x5
	[0075.003] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.003] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.003] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.004] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.004] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.004] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65b0
	[0075.005] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.005] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SLATE.ELM", cAlternateFileName="")) returned 1
	[0075.005] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65b4
	[0075.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.006] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SLATE.INF", cAlternateFileName="")) returned 1
	[0075.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65b8
	[0075.006] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.006] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.006] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65bc
	[0075.007] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.007] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a29, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.007] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.007] SetLastError (dwErrCode=0x0) 
	[0075.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.008] GetLastError () returned 0x5
	[0075.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.008] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.008] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0075.008] SetLastError (dwErrCode=0x0) 
	[0075.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.008] GetLastError () returned 0x5
	[0075.008] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.008] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.008] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.009] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.009] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.009] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c0
	[0075.009] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.010] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd59f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SONORA.ELM", cAlternateFileName="")) returned 1
	[0075.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c4
	[0075.010] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.010] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SONORA.INF", cAlternateFileName="")) returned 1
	[0075.010] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c8
	[0075.011] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.011] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.011] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65cc
	[0075.012] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.012] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5534, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.012] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.012] SetLastError (dwErrCode=0x0) 
	[0075.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.012] GetLastError () returned 0x5
	[0075.012] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.012] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.012] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0075.012] SetLastError (dwErrCode=0x0) 
	[0075.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.012] GetLastError () returned 0x5
	[0075.012] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.012] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.013] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.047] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.047] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.047] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65d0
	[0075.048] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.048] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10af1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPRING.ELM", cAlternateFileName="")) returned 1
	[0075.048] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65d4
	[0075.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.049] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SPRING.INF", cAlternateFileName="")) returned 1
	[0075.049] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65d8
	[0075.049] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.050] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.050] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65dc
	[0075.050] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.050] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c45, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.050] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.051] SetLastError (dwErrCode=0x0) 
	[0075.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.051] GetLastError () returned 0x5
	[0075.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.051] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.051] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0075.051] SetLastError (dwErrCode=0x0) 
	[0075.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.051] GetLastError () returned 0x5
	[0075.051] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.051] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.051] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.052] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.052] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x28551719, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.052] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65e0
	[0075.052] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.052] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe232, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STRTEDGE.ELM", cAlternateFileName="")) returned 1
	[0075.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65e4
	[0075.053] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.053] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x271, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STRTEDGE.INF", cAlternateFileName="")) returned 1
	[0075.053] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65e8
	[0075.054] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.054] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.054] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65ec
	[0075.054] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.055] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c7, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.055] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.055] SetLastError (dwErrCode=0x0) 
	[0075.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.055] GetLastError () returned 0x5
	[0075.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.055] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.055] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0075.055] SetLastError (dwErrCode=0x0) 
	[0075.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.055] GetLastError () returned 0x5
	[0075.055] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.055] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.055] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.056] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.056] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65f0
	[0075.056] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.056] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbfed, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STUDIO.ELM", cAlternateFileName="")) returned 1
	[0075.056] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65f4
	[0075.057] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.057] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="STUDIO.INF", cAlternateFileName="")) returned 1
	[0075.057] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65f8
	[0075.058] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.058] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.058] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65fc
	[0075.058] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.059] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.059] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.059] SetLastError (dwErrCode=0x0) 
	[0075.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.059] GetLastError () returned 0x5
	[0075.059] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.059] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.059] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0075.059] SetLastError (dwErrCode=0x0) 
	[0075.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.059] GetLastError () returned 0x5
	[0075.059] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.059] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.059] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.123] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.123] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x137f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.123] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6600
	[0075.123] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.123] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e14, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SUMIPNTG.ELM", cAlternateFileName="")) returned 1
	[0075.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6604
	[0075.124] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.124] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SUMIPNTG.INF", cAlternateFileName="")) returned 1
	[0075.124] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6608
	[0075.125] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.125] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.125] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660c
	[0075.126] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.126] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad0e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 0
	[0075.126] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.126] SetLastError (dwErrCode=0x0) 
	[0075.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.126] GetLastError () returned 0x5
	[0075.126] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.126] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.126] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0075.126] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6358
	[0075.127] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.127] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATER", cAlternateFileName="")) returned 1
	[0075.127] SetLastError (dwErrCode=0x0) 
	[0075.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.127] GetLastError () returned 0x5
	[0075.127] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.127] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.127] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb9b0
	[0075.128] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.128] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6c, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6614
	[0075.128] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.128] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5d5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.128] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6618
	[0075.129] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.129] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x101cc, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATER.ELM", cAlternateFileName="")) returned 1
	[0075.129] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x661c
	[0075.130] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.130] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATER.INF", cAlternateFileName="")) returned 1
	[0075.130] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd1940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6620
	[0075.130] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.131] FindNextFileW (in: hFindFile=0x274bd1fb9b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATER.INF", cAlternateFileName="")) returned 0
	[0075.131] FindClose (in: hFindFile=0x274bd1fb9b0 | out: hFindFile=0x274bd1fb9b0) returned 1
	[0075.131] SetLastError (dwErrCode=0x0) 
	[0075.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.131] GetLastError () returned 0x5
	[0075.131] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.131] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.131] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0075.131] SetLastError (dwErrCode=0x0) 
	[0075.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.131] GetLastError () returned 0x5
	[0075.131] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.131] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.132] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.132] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x623, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PREVIEW.GIF", cAlternateFileName="")) returned 1
	[0075.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd5010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6624
	[0075.132] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.132] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="THMBNAIL.PNG", cAlternateFileName="")) returned 1
	[0075.132] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cd86e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6628
	[0075.133] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.133] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbfc6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATERMAR.ELM", cAlternateFileName="")) returned 1
	[0075.133] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdbdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x662c
	[0075.134] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.134] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 1
	[0075.134] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.134] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cdf480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6630
	[0075.135] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.135] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATERMAR.INF", cAlternateFileName="")) returned 0
	[0075.135] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.135] SetLastError (dwErrCode=0x0) 
	[0075.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.135] GetLastError () returned 0x5
	[0075.135] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.135] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.135] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0075.135] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0075.135] SetLastError (dwErrCode=0x0) 
	[0075.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.135] GetLastError () returned 0x5
	[0075.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.136] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.136] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0075.136] SetLastError (dwErrCode=0x0) 
	[0075.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.136] GetLastError () returned 0x5
	[0075.136] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.136] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.136] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0075.138] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.138] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENES", cAlternateFileName="")) returned 1
	[0075.138] SetLastError (dwErrCode=0x0) 
	[0075.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.138] GetLastError () returned 0x5
	[0075.138] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.138] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.138] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.138] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc85db99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc85db99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc883e0d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.138] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 1
	[0075.138] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.139] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce2b50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6634
	[0075.139] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.139] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc883e0d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc883e0d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeed1e, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1ENES.ITS", cAlternateFileName="")) returned 0
	[0075.139] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.139] SetLastError (dwErrCode=0x0) 
	[0075.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enes\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.140] GetLastError () returned 0x5
	[0075.140] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.140] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.140] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0075.140] SetLastError (dwErrCode=0x0) 
	[0075.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.140] GetLastError () returned 0x5
	[0075.140] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.140] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0075.140] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.140] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 1
	[0075.140] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce6220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6638
	[0075.141] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.141] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe64da, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1ENFR.ITS", cAlternateFileName="")) returned 0
	[0075.141] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0075.141] SetLastError (dwErrCode=0x0) 
	[0075.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enfr\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.141] GetLastError () returned 0x5
	[0075.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.141] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.141] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0075.141] SetLastError (dwErrCode=0x0) 
	[0075.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.141] GetLastError () returned 0x5
	[0075.141] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.141] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.141] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0075.142] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.142] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1ESEN.DLL", cAlternateFileName="")) returned 1
	[0075.142] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xff7f2, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1ESEN.ITS", cAlternateFileName="")) returned 1
	[0075.142] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ce98f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x663c
	[0075.142] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.142] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 1
	[0075.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.143] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cecfc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6640
	[0075.143] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.143] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5c00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WT61ES.LEX", cAlternateFileName="")) returned 0
	[0075.143] FindClose (in: hFindFile=0x274bd1fc010 | out: hFindFile=0x274bd1fc010) returned 1
	[0075.143] SetLastError (dwErrCode=0x0) 
	[0075.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.143] GetLastError () returned 0x5
	[0075.143] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.144] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.144] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FREN", cAlternateFileName="")) returned 1
	[0075.144] SetLastError (dwErrCode=0x0) 
	[0075.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.144] GetLastError () returned 0x5
	[0075.144] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.144] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.144] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.182] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.182] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1FREN.DLL", cAlternateFileName="")) returned 1
	[0075.182] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd2ac, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1FREN.ITS", cAlternateFileName="")) returned 1
	[0075.182] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6644
	[0075.183] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.183] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc91c74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc91c74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 1
	[0075.183] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6648
	[0075.184] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.184] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc91c74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc91c74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WT61FR.LEX", cAlternateFileName="")) returned 0
	[0075.184] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.184] SetLastError (dwErrCode=0x0) 
	[0075.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.184] GetLastError () returned 0x5
	[0075.184] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.184] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.184] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0075.184] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6610
	[0075.186] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.186] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x324d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1CORE.DLL", cAlternateFileName="")) returned 1
	[0075.186] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ed8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 1
	[0075.186] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ed8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSB1XTOR.DLL", cAlternateFileName="")) returned 0
	[0075.186] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0075.186] SetLastError (dwErrCode=0x0) 
	[0075.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.186] GetLastError () returned 0x5
	[0075.186] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.187] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.187] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0075.187] SetLastError (dwErrCode=0x0) 
	[0075.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.187] GetLastError () returned 0x5
	[0075.187] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.187] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0075.187] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.187] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBA7.1", cAlternateFileName="")) returned 1
	[0075.187] SetLastError (dwErrCode=0x0) 
	[0075.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.187] GetLastError () returned 0x5
	[0075.187] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.187] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.187] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.187] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.187] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.187] SetLastError (dwErrCode=0x0) 
	[0075.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.188] GetLastError () returned 0x5
	[0075.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0075.188] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xecf3682d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4d4679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4d4679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26090, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBE7INTL.DLL", cAlternateFileName="")) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208c88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBEUIINTL.DLL", cAlternateFileName="VBEUII~1.DLL")) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x208c88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBEUIINTL.DLL", cAlternateFileName="VBEUII~1.DLL")) returned 0
	[0075.188] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.188] SetLastError (dwErrCode=0x0) 
	[0075.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.188] GetLastError () returned 0x5
	[0075.188] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0075.188] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb652e29, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x281288, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBEUI.DLL", cAlternateFileName="")) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x27cd30bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52aae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBEUIRES.DLL", cAlternateFileName="")) returned 1
	[0075.188] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x27cd30bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52aae8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBEUIRES.DLL", cAlternateFileName="")) returned 0
	[0075.188] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.188] SetLastError (dwErrCode=0x0) 
	[0075.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.189] GetLastError () returned 0x5
	[0075.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.189] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.189] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0075.189] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0075.189] SetLastError (dwErrCode=0x0) 
	[0075.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.189] GetLastError () returned 0x5
	[0075.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.189] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.189] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0075.189] SetLastError (dwErrCode=0x0) 
	[0075.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.189] GetLastError () returned 0x5
	[0075.189] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.190] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.190] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc310
	[0075.190] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.190] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0075.190] SetLastError (dwErrCode=0x0) 
	[0075.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.191] GetLastError () returned 0x5
	[0075.191] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.191] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0075.192] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.192] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4f2ea, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="BIGFONT.SHX", cAlternateFileName="")) returned 1
	[0075.192] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c97570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6650
	[0075.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.193] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x531047b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xa261d, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CHINESET.SHX", cAlternateFileName="")) returned 1
	[0075.193] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.193] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6654
	[0075.193] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.194] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x531047b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a9e6, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EXTFONT.SHX", cAlternateFileName="")) returned 1
	[0075.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.194] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c9e310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6658
	[0075.194] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.194] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x531047b, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x531047b, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f6e784, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdc6b9, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="GBCBIG.SHX", cAlternateFileName="")) returned 1
	[0075.194] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca19e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x665c
	[0075.195] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.195] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f6e784, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5f6e784, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2b01, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="IC-TXT.SHX", cAlternateFileName="")) returned 1
	[0075.195] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca50b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6660
	[0075.196] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.196] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ICAD.FMP", cAlternateFileName="")) returned 1
	[0075.196] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ca8780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6664
	[0075.196] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.197] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x369d3, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHGDTXT.SHX", cAlternateFileName="")) returned 1
	[0075.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cabe50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6668
	[0075.197] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.197] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2fde5, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHGTXT.SHX", cAlternateFileName="")) returned 1
	[0075.197] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2caf520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x666c
	[0075.198] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.198] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f6e784, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5f6e784, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x9e413, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHTGTXT.SHX", cAlternateFileName="")) returned 1
	[0075.198] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.198] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb2bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6670
	[0075.199] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.199] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 1
	[0075.199] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.199] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb62c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6674
	[0075.199] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.200] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x62b5b1e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62dbd7b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdfc98, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="WHTMTXT.SHX", cAlternateFileName="")) returned 0
	[0075.200] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0075.201] SetLastError (dwErrCode=0x0) 
	[0075.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.202] GetLastError () returned 0x5
	[0075.202] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.202] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.202] FindNextFileW (in: hFindFile=0x274bd1fc310, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0075.202] FindClose (in: hFindFile=0x274bd1fc310 | out: hFindFile=0x274bd1fc310) returned 1
	[0075.203] SetLastError (dwErrCode=0x0) 
	[0075.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.203] GetLastError () returned 0x5
	[0075.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.203] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.203] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0075.203] SetLastError (dwErrCode=0x0) 
	[0075.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.203] GetLastError () returned 0x5
	[0075.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.203] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0075.203] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.203] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="16", cAlternateFileName="")) returned 1
	[0075.203] SetLastError (dwErrCode=0x0) 
	[0075.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.203] GetLastError () returned 0x5
	[0075.203] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.203] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.204] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.204] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="BIN", cAlternateFileName="")) returned 1
	[0075.204] SetLastError (dwErrCode=0x0) 
	[0075.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.204] GetLastError () returned 0x5
	[0075.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0075.204] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0075.204] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.204] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.204] SetLastError (dwErrCode=0x0) 
	[0075.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.204] GetLastError () returned 0x5
	[0075.204] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0) returned 0
	[0075.204] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\*.*", lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc250
	[0075.205] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.205] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29b77, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 1
	[0075.205] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cb9990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6680
	[0075.206] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.206] FindNextFileW (in: hFindFile=0x274bd1fc250, lpFindFileData=0xe68cf79e10 | out: lpFindFileData=0xe68cf79e10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca27806, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29b77, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPEXT.MSG", cAlternateFileName="")) returned 0
	[0075.206] FindClose (in: hFindFile=0x274bd1fc250 | out: hFindFile=0x274bd1fc250) returned 1
	[0075.207] SetLastError (dwErrCode=0x0) 
	[0075.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.207] GetLastError () returned 0x5
	[0075.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7a570, lpOverlapped=0x0) returned 0
	[0075.207] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.207] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0075.207] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1
	[0075.207] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0
	[0075.207] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0075.207] SetLastError (dwErrCode=0x0) 
	[0075.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\bin\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.207] GetLastError () returned 0x5
	[0075.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0075.207] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.207] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x274, dwReserved1=0x8cf7ade0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0075.207] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.207] SetLastError (dwErrCode=0x0) 
	[0075.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.207] GetLastError () returned 0x5
	[0075.207] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.208] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.208] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="16", cAlternateFileName="")) returned 0
	[0075.208] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0075.208] SetLastError (dwErrCode=0x0) 
	[0075.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Web Server Extensions\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\web server extensions\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.208] GetLastError () returned 0x5
	[0075.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.208] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.208] FindNextFileW (in: hFindFile=0x274bd1fc430, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0075.208] FindClose (in: hFindFile=0x274bd1fc430 | out: hFindFile=0x274bd1fc430) returned 1
	[0075.208] SetLastError (dwErrCode=0x0) 
	[0075.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.208] GetLastError () returned 0x5
	[0075.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0075.208] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.208] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ODBC", cAlternateFileName="")) returned 1
	[0075.208] SetLastError (dwErrCode=0x0) 
	[0075.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.208] GetLastError () returned 0x5
	[0075.208] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0075.208] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.208] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0075.209] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.209] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 1
	[0075.209] SetLastError (dwErrCode=0x0) 
	[0075.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.209] GetLastError () returned 0x5
	[0075.209] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.209] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.210] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.210] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 0
	[0075.210] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.210] SetLastError (dwErrCode=0x0) 
	[0075.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\data sources\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.210] GetLastError () returned 0x5
	[0075.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.210] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0
	[0075.210] FindClose (in: hFindFile=0x274bd1fb6b0 | out: hFindFile=0x274bd1fb6b0) returned 1
	[0075.210] SetLastError (dwErrCode=0x0) 
	[0075.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\odbc\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.210] GetLastError () returned 0x5
	[0075.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0075.210] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.210] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SYSTEM", cAlternateFileName="")) returned 1
	[0075.210] SetLastError (dwErrCode=0x0) 
	[0075.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.210] GetLastError () returned 0x5
	[0075.210] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0075.211] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.211] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.211] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSMAPI", cAlternateFileName="")) returned 1
	[0075.211] SetLastError (dwErrCode=0x0) 
	[0075.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.212] GetLastError () returned 0x5
	[0075.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.212] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.212] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.212] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.212] SetLastError (dwErrCode=0x0) 
	[0075.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.212] GetLastError () returned 0x5
	[0075.212] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.212] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.212] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc490
	[0075.212] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.212] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1
	[0075.212] FindNextFileW (in: hFindFile=0x274bd1fc490, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0
	[0075.212] FindClose (in: hFindFile=0x274bd1fc490 | out: hFindFile=0x274bd1fc490) returned 1
	[0075.212] SetLastError (dwErrCode=0x0) 
	[0075.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.213] GetLastError () returned 0x5
	[0075.213] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.213] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.213] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 0
	[0075.213] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.213] SetLastError (dwErrCode=0x0) 
	[0075.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\msmapi\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.213] GetLastError () returned 0x5
	[0075.213] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.213] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.213] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1
	[0075.213] SetLastError (dwErrCode=0x0) 
	[0075.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.213] GetLastError () returned 0x5
	[0075.213] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.213] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0075.214] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.214] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44230, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1
	[0075.214] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1
	[0075.214] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0
	[0075.214] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0075.214] SetLastError (dwErrCode=0x0) 
	[0075.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ole db\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.214] GetLastError () returned 0x5
	[0075.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.214] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.214] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0075.214] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.214] SetLastError (dwErrCode=0x0) 
	[0075.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\system\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.214] GetLastError () returned 0x5
	[0075.214] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0075.214] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.214] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="SYSTEM", cAlternateFileName="")) returned 0
	[0075.214] FindClose (in: hFindFile=0x274bd1fbd10 | out: hFindFile=0x274bd1fbd10) returned 1
	[0075.214] SetLastError (dwErrCode=0x0) 
	[0075.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.214] GetLastError () returned 0x5
	[0075.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0075.215] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.215] FindNextFileW (in: hFindFile=0x274bd1fbfb0, lpFindFileData=0xe68cf7cc90 | out: lpFindFileData=0xe68cf7cc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1
	[0075.215] SetLastError (dwErrCode=0x0) 
	[0075.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.215] GetLastError () returned 0x5
	[0075.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7cc30, lpOverlapped=0x0) returned 0
	[0075.215] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*.*", lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbd10
	[0075.215] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.215] FindNextFileW (in: hFindFile=0x274bd1fbd10, lpFindFileData=0xe68cf7c4d0 | out: lpFindFileData=0xe68cf7c4d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0075.215] SetLastError (dwErrCode=0x0) 
	[0075.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.215] GetLastError () returned 0x5
	[0075.215] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7c470, lpOverlapped=0x0) returned 0
	[0075.215] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.215] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*.*", lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb6b0
	[0075.215] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.216] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0075.216] SetLastError (dwErrCode=0x0) 
	[0075.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.216] GetLastError () returned 0x5
	[0075.216] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.216] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.218] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.218] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0075.218] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0075.218] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0075.218] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 1
	[0075.218] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0xba470cc0, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 0
	[0075.218] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.219] SetLastError (dwErrCode=0x0) 
	[0075.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\equation\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.221] GetLastError () returned 0x5
	[0075.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.221] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.221] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Help", cAlternateFileName="")) returned 1
	[0075.221] SetLastError (dwErrCode=0x0) 
	[0075.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.221] GetLastError () returned 0x5
	[0075.221] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.221] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.225] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.225] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1028", cAlternateFileName="")) returned 1
	[0075.225] SetLastError (dwErrCode=0x0) 
	[0075.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.225] GetLastError () returned 0x5
	[0075.225] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.225] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.225] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.225] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.226] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.226] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.226] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.226] SetLastError (dwErrCode=0x0) 
	[0075.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1028\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.226] GetLastError () returned 0x5
	[0075.226] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.226] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.226] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1031", cAlternateFileName="")) returned 1
	[0075.226] SetLastError (dwErrCode=0x0) 
	[0075.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.226] GetLastError () returned 0x5
	[0075.226] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.226] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.226] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc5b0
	[0075.226] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.226] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.226] FindNextFileW (in: hFindFile=0x274bd1fc5b0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.226] FindClose (in: hFindFile=0x274bd1fc5b0 | out: hFindFile=0x274bd1fc5b0) returned 1
	[0075.226] SetLastError (dwErrCode=0x0) 
	[0075.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1031\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.227] GetLastError () returned 0x5
	[0075.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.227] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.227] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.227] SetLastError (dwErrCode=0x0) 
	[0075.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.227] GetLastError () returned 0x5
	[0075.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.227] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc070
	[0075.227] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.227] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.227] FindNextFileW (in: hFindFile=0x274bd1fc070, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.227] FindClose (in: hFindFile=0x274bd1fc070 | out: hFindFile=0x274bd1fc070) returned 1
	[0075.227] SetLastError (dwErrCode=0x0) 
	[0075.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.227] GetLastError () returned 0x5
	[0075.227] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.227] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.227] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1036", cAlternateFileName="")) returned 1
	[0075.227] SetLastError (dwErrCode=0x0) 
	[0075.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.228] GetLastError () returned 0x5
	[0075.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.228] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.228] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.228] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.228] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.228] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.228] SetLastError (dwErrCode=0x0) 
	[0075.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1036\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.228] GetLastError () returned 0x5
	[0075.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.228] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.228] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1040", cAlternateFileName="")) returned 1
	[0075.228] SetLastError (dwErrCode=0x0) 
	[0075.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.228] GetLastError () returned 0x5
	[0075.228] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.228] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.228] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.228] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.229] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.229] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.229] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.229] SetLastError (dwErrCode=0x0) 
	[0075.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1040\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.229] GetLastError () returned 0x5
	[0075.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.229] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.229] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1041", cAlternateFileName="")) returned 1
	[0075.229] SetLastError (dwErrCode=0x0) 
	[0075.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.229] GetLastError () returned 0x5
	[0075.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.229] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.229] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.229] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.229] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.229] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.229] SetLastError (dwErrCode=0x0) 
	[0075.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1041\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.229] GetLastError () returned 0x5
	[0075.229] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.230] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.230] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1042", cAlternateFileName="")) returned 1
	[0075.230] SetLastError (dwErrCode=0x0) 
	[0075.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.230] GetLastError () returned 0x5
	[0075.230] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.230] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.231] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.231] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.231] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.231] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.231] SetLastError (dwErrCode=0x0) 
	[0075.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1042\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.231] GetLastError () returned 0x5
	[0075.231] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.231] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.231] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1046", cAlternateFileName="")) returned 1
	[0075.231] SetLastError (dwErrCode=0x0) 
	[0075.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.231] GetLastError () returned 0x5
	[0075.231] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.231] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.231] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc0d0
	[0075.232] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.232] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.232] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.232] FindClose (in: hFindFile=0x274bd1fc0d0 | out: hFindFile=0x274bd1fc0d0) returned 1
	[0075.232] SetLastError (dwErrCode=0x0) 
	[0075.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1046\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.232] GetLastError () returned 0x5
	[0075.232] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.232] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.232] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1049", cAlternateFileName="")) returned 1
	[0075.232] SetLastError (dwErrCode=0x0) 
	[0075.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.232] GetLastError () returned 0x5
	[0075.232] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.232] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.233] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.233] SetLastError (dwErrCode=0x0) 
	[0075.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\1049\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.233] GetLastError () returned 0x5
	[0075.233] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.233] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="2052", cAlternateFileName="")) returned 1
	[0075.233] SetLastError (dwErrCode=0x0) 
	[0075.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.233] GetLastError () returned 0x5
	[0075.233] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.233] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.233] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.234] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.234] SetLastError (dwErrCode=0x0) 
	[0075.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\2052\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.234] GetLastError () returned 0x5
	[0075.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.234] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3082", cAlternateFileName="")) returned 1
	[0075.234] SetLastError (dwErrCode=0x0) 
	[0075.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.234] GetLastError () returned 0x5
	[0075.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0075.234] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.234] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0075.234] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0075.234] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0075.234] SetLastError (dwErrCode=0x0) 
	[0075.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\3082\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.234] GetLastError () returned 0x5
	[0075.234] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.234] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.234] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="3082", cAlternateFileName="")) returned 0
	[0075.235] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.235] SetLastError (dwErrCode=0x0) 
	[0075.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\help\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.235] GetLastError () returned 0x5
	[0075.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.235] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.235] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0075.235] SetLastError (dwErrCode=0x0) 
	[0075.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.235] GetLastError () returned 0x5
	[0075.235] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.235] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.235] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.236] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.236] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.236] SetLastError (dwErrCode=0x0) 
	[0075.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.237] GetLastError () returned 0x5
	[0075.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.237] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.237] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc1f0
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd48340d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175660, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fc1f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 0
	[0075.237] FindClose (in: hFindFile=0x274bd1fc1f0 | out: hFindFile=0x274bd1fc1f0) returned 1
	[0075.237] SetLastError (dwErrCode=0x0) 
	[0075.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.237] GetLastError () returned 0x5
	[0075.237] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.237] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75cf220, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0075.237] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf81bae82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf22105da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf85e70a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf89c6ded, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf89c6ded, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf969787e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6439c09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf91acb76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf937677a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8a13295, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8c4f5e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27d1f57e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f02d8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="CMigrate.exe", cAlternateFileName="")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46e460, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0075.238] SetLastError (dwErrCode=0x0) 
	[0075.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.238] GetLastError () returned 0x5
	[0075.238] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.238] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.238] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0075.239] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cbd060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6678
	[0075.239] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.239] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0075.239] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.240] SetLastError (dwErrCode=0x0) 
	[0075.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\cultures\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.240] GetLastError () returned 0x5
	[0075.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.240] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.240] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0075.240] SetLastError (dwErrCode=0x0) 
	[0075.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.240] GetLastError () returned 0x5
	[0075.240] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.240] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.240] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb8f0
	[0075.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 1
	[0075.240] FindNextFileW (in: hFindFile=0x274bd1fb8f0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 0
	[0075.240] FindClose (in: hFindFile=0x274bd1fb8f0 | out: hFindFile=0x274bd1fb8f0) returned 1
	[0075.240] SetLastError (dwErrCode=0x0) 
	[0075.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\en-us\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.241] GetLastError () returned 0x5
	[0075.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.241] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda54c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d2060, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0147f8e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0147f8e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ff0c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO40UIRES.DLL", cAlternateFileName="MSO40U~1.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7112c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Mso40UIwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x286f50d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x921260, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSO99LRES.DLL", cAlternateFileName="MSO99L~1.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2878da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x591a60, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Mso99Lwin32client.dll", cAlternateFileName="MSO99L~2.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a82fe42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e3e8c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x115c78, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7642a1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7642a1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd860, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x29aa07ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2b4d876, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc289be7e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="oregres.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0075.241] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.241] SetLastError (dwErrCode=0x0) 
	[0075.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\office16\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.241] GetLastError () returned 0x5
	[0075.241] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.241] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.241] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="Portal", cAlternateFileName="")) returned 1
	[0075.241] SetLastError (dwErrCode=0x0) 
	[0075.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.242] GetLastError () returned 0x5
	[0075.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.242] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.242] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.242] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.242] SetLastError (dwErrCode=0x0) 
	[0075.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.242] GetLastError () returned 0x5
	[0075.242] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.242] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc0d0
	[0075.242] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.242] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0075.242] FindNextFileW (in: hFindFile=0x274bd1fc0d0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0
	[0075.242] FindClose (in: hFindFile=0x274bd1fc0d0 | out: hFindFile=0x274bd1fc0d0) returned 1
	[0075.242] SetLastError (dwErrCode=0x0) 
	[0075.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.242] GetLastError () returned 0x5
	[0075.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.243] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.243] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0075.243] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0
	[0075.243] FindClose (in: hFindFile=0x274bd1fb710 | out: hFindFile=0x274bd1fb710) returned 1
	[0075.243] SetLastError (dwErrCode=0x0) 
	[0075.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\portal\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.243] GetLastError () returned 0x5
	[0075.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.243] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.243] FindNextFileW (in: hFindFile=0x274bd1fb6b0, lpFindFileData=0xe68cf7bd10 | out: lpFindFileData=0xe68cf7bd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0075.243] SetLastError (dwErrCode=0x0) 
	[0075.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.243] GetLastError () returned 0x5
	[0075.243] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7bcb0, lpOverlapped=0x0) returned 0
	[0075.243] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.243] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*.*", lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fc010
	[0075.244] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.244] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBA6", cAlternateFileName="")) returned 1
	[0075.244] SetLastError (dwErrCode=0x0) 
	[0075.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.244] GetLastError () returned 0x5
	[0075.244] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.244] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fbdd0
	[0075.244] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.245] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1
	[0075.245] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc0730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x667c
	[0075.245] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.245] FindNextFileW (in: hFindFile=0x274bd1fbdd0, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0
	[0075.245] FindClose (in: hFindFile=0x274bd1fbdd0 | out: hFindFile=0x274bd1fbdd0) returned 1
	[0075.245] SetLastError (dwErrCode=0x0) 
	[0075.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba6\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.246] GetLastError () returned 0x5
	[0075.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.246] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.246] FindNextFileW (in: hFindFile=0x274bd1fc010, lpFindFileData=0xe68cf7b550 | out: lpFindFileData=0xe68cf7b550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBA7.1", cAlternateFileName="")) returned 1
	[0075.246] SetLastError (dwErrCode=0x0) 
	[0075.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.246] GetLastError () returned 0x5
	[0075.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7b4f0, lpOverlapped=0x0) returned 0
	[0075.246] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*.*", lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb710
	[0075.246] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.246] FindNextFileW (in: hFindFile=0x274bd1fb710, lpFindFileData=0xe68cf7ad90 | out: lpFindFileData=0xe68cf7ad90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="1033", cAlternateFileName="")) returned 1
	[0075.246] SetLastError (dwErrCode=0x0) 
	[0075.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.246] GetLastError () returned 0x5
	[0075.246] WriteFile (in: hFile=0xffffffffffffffff, lpBuffer=0x7ff7f2c89500, nNumberOfBytesToWrite=0x324, lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0xe68cf7ad30, lpOverlapped=0x0) returned 0
	[0075.246] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0075.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*.*", lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName=".", cAlternateFileName="")) returned 0x274bd1fb950
	[0075.256] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.256] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f982, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0075.256] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c8d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6688
	[0075.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9b50c1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9b50c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9b50c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a40b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0075.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c907d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x668c
	[0075.257] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.257] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0075.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2c93ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6690
	[0075.258] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.258] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0075.258] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc3e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6694
	[0075.259] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.259] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe230b, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0075.259] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.259] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cc74d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6698
	[0075.259] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.260] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4da68, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca4da68, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca4da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0075.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2ccaba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x669c
	[0075.260] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.260] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0075.260] VirtualAlloc (lpAddress=0x0, dwSize=0x2710, flAllocationType=0x1000, flProtect=0x4) returned 0x274bc810000
	[0075.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x7ff7f2c66aa0, lpParameter=0x7ff7f2cce270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66a0
	[0075.261] VirtualFree (lpAddress=0x274bc810000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0075.261] FindNextFileW (in: hFindFile=0x274bd1fb950, lpFindFileData=0xe68cf7a5d0 | out: lpFindFileData=0xe68cf7a5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0xba470cc0, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0
	[0075.261] FindClose (in: hFindFile=0x274bd1fb950 | out: hFindFile=0x274bd1fb950) returned 1
	[0075.262] SetLastError (dwErrCode=0x0) 
	[0075.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\RyukReadMe.txt" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx86\\microsoft shared\\vba\\vba7.1\\1033\\ryukreadme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) 

Thread:
	id = 44
	os_tid = 0xf30


Thread:
	id = 134
	os_tid = 0xb84

	[0045.201] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", dwFileAttributes=0x80) returned 1
	[0045.432] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0045.432] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d07fb18 | out: lpFileSize=0xe68d07fb18*=42674) returned 1
	[0045.432] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d07fb30 | out: lpFileSize=0xe68d07fb30*=42674) returned 1
	[0045.432] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0xa590, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.432] ReadFile (in: hFile=0x7c8, lpBuffer=0xe68d07fb80, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d07fb40, lpOverlapped=0x0 | out: lpBuffer=0xe68d07fb80*, lpNumberOfBytesRead=0xe68d07fb40*=0x19, lpOverlapped=0x0) returned 1
	[0045.434] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.434] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d07fb00 | out: phKey=0xe68d07fb00*=0x274ba5c1280) returned 1
	[0045.434] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.434] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.434] ReadFile (in: hFile=0x7c8, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xa6b2, lpNumberOfBytesRead=0xe68d07fb10, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d07fb10*=0xa6b2, lpOverlapped=0x0) returned 1
	[0045.435] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d07fb0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d07fb0c*=0xf4250) returned 1
	[0045.435] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d07fb08*=0xa6b2, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d07fb08*=0xa6c0) returned 1
	[0045.435] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.435] WriteFile (in: hFile=0x7c8, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0xe68d07fb10, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d07fb10*=0xa6c0, lpOverlapped=0x0) returned 1
	[0045.436] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d07fb48*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d07fb14, lpOverlapped=0x0 | out: lpBuffer=0xe68d07fb48*, lpNumberOfBytesWritten=0xe68d07fb14*=0x6, lpOverlapped=0x0) returned 1
	[0045.436] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d07fb20 | out: pbData=0x0*, pdwDataLen=0xe68d07fb20*=0x10c) returned 1
	[0045.436] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d07fba0, pdwDataLen=0xe68d07fb20 | out: pbData=0xe68d07fba0*, pdwDataLen=0xe68d07fb20*=0x10c) returned 1
	[0045.436] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d07fba0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d07fb14, lpOverlapped=0x0 | out: lpBuffer=0xe68d07fba0*, lpNumberOfBytesWritten=0xe68d07fb14*=0x10c, lpOverlapped=0x0) returned 1
	[0045.436] CloseHandle (hObject=0x7c8) returned 1
	[0045.452] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.456] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 135
	os_tid = 0xfa0

	[0045.202] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", dwFileAttributes=0x80) returned 1
	[0045.239] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.239] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d0ff928 | out: lpFileSize=0xe68d0ff928*=6004) returned 1
	[0045.239] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d0ff940 | out: lpFileSize=0xe68d0ff940*=6004) returned 1
	[0045.239] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0x1652, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.239] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d0ff990, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d0ff950, lpOverlapped=0x0 | out: lpBuffer=0xe68d0ff990*, lpNumberOfBytesRead=0xe68d0ff950*=0x19, lpOverlapped=0x0) returned 1
	[0045.251] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.251] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d0ff910 | out: phKey=0xe68d0ff910*=0x274ba5c1280) returned 1
	[0045.251] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.252] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.252] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x1774, lpNumberOfBytesRead=0xe68d0ff920, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d0ff920*=0x1774, lpOverlapped=0x0) returned 1
	[0045.256] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d0ff91c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d0ff91c*=0xf4250) returned 1
	[0045.259] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d0ff918*=0x1774, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d0ff918*=0x1780) returned 1
	[0045.259] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.259] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0xe68d0ff920, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d0ff920*=0x1780, lpOverlapped=0x0) returned 1
	[0045.259] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d0ff958*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d0ff924, lpOverlapped=0x0 | out: lpBuffer=0xe68d0ff958*, lpNumberOfBytesWritten=0xe68d0ff924*=0x6, lpOverlapped=0x0) returned 1
	[0045.259] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d0ff930 | out: pbData=0x0*, pdwDataLen=0xe68d0ff930*=0x10c) returned 1
	[0045.259] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d0ff9b0, pdwDataLen=0xe68d0ff930 | out: pbData=0xe68d0ff9b0*, pdwDataLen=0xe68d0ff930*=0x10c) returned 1
	[0045.260] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d0ff9b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d0ff924, lpOverlapped=0x0 | out: lpBuffer=0xe68d0ff9b0*, lpNumberOfBytesWritten=0xe68d0ff924*=0x10c, lpOverlapped=0x0) returned 1
	[0045.260] CloseHandle (hObject=0x78c) returned 1
	[0045.278] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.282] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 136
	os_tid = 0xc34

	[0045.202] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", dwFileAttributes=0x80) returned 1
	[0045.461] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x790
	[0045.461] GetFileSizeEx (in: hFile=0x790, lpFileSize=0xe68d17faf8 | out: lpFileSize=0xe68d17faf8*=40) returned 1
	[0045.462] GetFileSizeEx (in: hFile=0x790, lpFileSize=0xe68d17fb10 | out: lpFileSize=0xe68d17fb10*=40) returned 1
	[0045.462] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d17fae0 | out: phKey=0xe68d17fae0*=0x274ba5c1910) returned 1
	[0045.462] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.462] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.462] ReadFile (in: hFile=0x790, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0xe68d17faf0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d17faf0*=0x28, lpOverlapped=0x0) returned 1
	[0045.465] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d17faec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d17faec*=0xf4250) returned 1
	[0045.465] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d17fae8*=0x28, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d17fae8*=0x30) returned 1
	[0045.465] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.465] WriteFile (in: hFile=0x790, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0xe68d17faf0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d17faf0*=0x30, lpOverlapped=0x0) returned 1
	[0045.465] WriteFile (in: hFile=0x790, lpBuffer=0xe68d17fb28*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d17faf4, lpOverlapped=0x0 | out: lpBuffer=0xe68d17fb28*, lpNumberOfBytesWritten=0xe68d17faf4*=0x6, lpOverlapped=0x0) returned 1
	[0045.465] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d17fb00 | out: pbData=0x0*, pdwDataLen=0xe68d17fb00*=0x10c) returned 1
	[0045.465] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d17fb80, pdwDataLen=0xe68d17fb00 | out: pbData=0xe68d17fb80*, pdwDataLen=0xe68d17fb00*=0x10c) returned 1
	[0045.465] WriteFile (in: hFile=0x790, lpBuffer=0xe68d17fb80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d17faf4, lpOverlapped=0x0 | out: lpBuffer=0xe68d17fb80*, lpNumberOfBytesWritten=0xe68d17faf4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.465] CloseHandle (hObject=0x790) returned 1
	[0045.532] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.536] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 137
	os_tid = 0xa60

	[0045.210] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd", dwFileAttributes=0x80) returned 1
	[0045.354] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.354] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d1ffac8 | out: lpFileSize=0xe68d1ffac8*=577) returned 1
	[0045.354] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d1ffae0 | out: lpFileSize=0xe68d1ffae0*=577) returned 1
	[0045.354] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.354] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d1ffb30, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d1ffaf0, lpOverlapped=0x0 | out: lpBuffer=0xe68d1ffb30*, lpNumberOfBytesRead=0xe68d1ffaf0*=0x19, lpOverlapped=0x0) returned 1
	[0045.369] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.369] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d1ffab0 | out: phKey=0xe68d1ffab0*=0x274ba5c1280) returned 1
	[0045.369] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0045.369] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.369] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x241, lpNumberOfBytesRead=0xe68d1ffac0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68d1ffac0*=0x241, lpOverlapped=0x0) returned 1
	[0045.369] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d1ffabc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d1ffabc*=0xf4250) returned 1
	[0045.369] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68d1ffab8*=0x241, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68d1ffab8*=0x250) returned 1
	[0045.369] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.369] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0xe68d1ffac0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68d1ffac0*=0x250, lpOverlapped=0x0) returned 1
	[0045.369] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d1ffaf8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d1ffac4, lpOverlapped=0x0 | out: lpBuffer=0xe68d1ffaf8*, lpNumberOfBytesWritten=0xe68d1ffac4*=0x6, lpOverlapped=0x0) returned 1
	[0045.369] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d1ffad0 | out: pbData=0x0*, pdwDataLen=0xe68d1ffad0*=0x10c) returned 1
	[0045.369] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d1ffb50, pdwDataLen=0xe68d1ffad0 | out: pbData=0xe68d1ffb50*, pdwDataLen=0xe68d1ffad0*=0x10c) returned 1
	[0045.369] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d1ffb50*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d1ffac4, lpOverlapped=0x0 | out: lpBuffer=0xe68d1ffb50*, lpNumberOfBytesWritten=0xe68d1ffac4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.369] CloseHandle (hObject=0x78c) returned 1
	[0045.386] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.389] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 138
	os_tid = 0xb98

	[0045.211] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd", dwFileAttributes=0x80) returned 1
	[0045.364] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0045.364] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d27f8a8 | out: lpFileSize=0xe68d27f8a8*=74) returned 1
	[0045.364] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d27f8c0 | out: lpFileSize=0xe68d27f8c0*=74) returned 1
	[0045.364] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d27f890 | out: phKey=0xe68d27f890*=0x274ba5c1910) returned 1
	[0045.364] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.364] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.364] ReadFile (in: hFile=0x7c8, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x4a, lpNumberOfBytesRead=0xe68d27f8a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d27f8a0*=0x4a, lpOverlapped=0x0) returned 1
	[0045.365] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d27f89c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d27f89c*=0xf4250) returned 1
	[0045.365] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d27f898*=0x4a, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d27f898*=0x50) returned 1
	[0045.365] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.365] WriteFile (in: hFile=0x7c8, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xe68d27f8a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d27f8a0*=0x50, lpOverlapped=0x0) returned 1
	[0045.365] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d27f8d8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d27f8a4, lpOverlapped=0x0 | out: lpBuffer=0xe68d27f8d8*, lpNumberOfBytesWritten=0xe68d27f8a4*=0x6, lpOverlapped=0x0) returned 1
	[0045.365] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d27f8b0 | out: pbData=0x0*, pdwDataLen=0xe68d27f8b0*=0x10c) returned 1
	[0045.366] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d27f930, pdwDataLen=0xe68d27f8b0 | out: pbData=0xe68d27f930*, pdwDataLen=0xe68d27f8b0*=0x10c) returned 1
	[0045.366] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d27f930*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d27f8a4, lpOverlapped=0x0 | out: lpBuffer=0xe68d27f930*, lpNumberOfBytesWritten=0xe68d27f8a4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.366] CloseHandle (hObject=0x7c8) returned 1
	[0045.403] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.408] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 139
	os_tid = 0xd10

	[0045.211] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd", dwFileAttributes=0x80) returned 1
	[0045.408] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.408] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d2ff798 | out: lpFileSize=0xe68d2ff798*=307) returned 1
	[0045.408] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d2ff7b0 | out: lpFileSize=0xe68d2ff7b0*=307) returned 1
	[0045.408] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0x11, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.409] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d2ff800, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d2ff7c0, lpOverlapped=0x0 | out: lpBuffer=0xe68d2ff800*, lpNumberOfBytesRead=0xe68d2ff7c0*=0x19, lpOverlapped=0x0) returned 1
	[0045.409] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.409] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d2ff780 | out: phKey=0xe68d2ff780*=0x274ba5c1280) returned 1
	[0045.409] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.410] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.410] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x133, lpNumberOfBytesRead=0xe68d2ff790, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d2ff790*=0x133, lpOverlapped=0x0) returned 1
	[0045.410] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d2ff78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d2ff78c*=0xf4250) returned 1
	[0045.410] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d2ff788*=0x133, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d2ff788*=0x140) returned 1
	[0045.410] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.410] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0xe68d2ff790, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d2ff790*=0x140, lpOverlapped=0x0) returned 1
	[0045.410] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d2ff7c8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d2ff794, lpOverlapped=0x0 | out: lpBuffer=0xe68d2ff7c8*, lpNumberOfBytesWritten=0xe68d2ff794*=0x6, lpOverlapped=0x0) returned 1
	[0045.410] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d2ff7a0 | out: pbData=0x0*, pdwDataLen=0xe68d2ff7a0*=0x10c) returned 1
	[0045.410] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d2ff820, pdwDataLen=0xe68d2ff7a0 | out: pbData=0xe68d2ff820*, pdwDataLen=0xe68d2ff7a0*=0x10c) returned 1
	[0045.410] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d2ff820*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d2ff794, lpOverlapped=0x0 | out: lpBuffer=0xe68d2ff820*, lpNumberOfBytesWritten=0xe68d2ff794*=0x10c, lpOverlapped=0x0) returned 1
	[0045.411] CloseHandle (hObject=0x78c) returned 1
	[0045.427] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.431] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 140
	os_tid = 0xac8

	[0045.212] SetFileAttributesW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER", dwFileAttributes=0x80) returned 0
	[0045.238] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0045.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 142
	os_tid = 0x90c

	[0045.435] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0045.458] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0045.458] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d3ff5b8 | out: lpFileSize=0xe68d3ff5b8*=7567) returned 1
	[0045.458] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d3ff5d0 | out: lpFileSize=0xe68d3ff5d0*=7567) returned 1
	[0045.458] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x1c6d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.458] ReadFile (in: hFile=0x7c8, lpBuffer=0xe68d3ff620, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d3ff5e0, lpOverlapped=0x0 | out: lpBuffer=0xe68d3ff620*, lpNumberOfBytesRead=0xe68d3ff5e0*=0x19, lpOverlapped=0x0) returned 1
	[0045.463] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.463] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d3ff5a0 | out: phKey=0xe68d3ff5a0*=0x274ba5c1280) returned 1
	[0045.463] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0045.463] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.463] ReadFile (in: hFile=0x7c8, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0xe68d3ff5b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68d3ff5b0*=0x1d8f, lpOverlapped=0x0) returned 1
	[0045.504] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d3ff5ac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d3ff5ac*=0xf4250) returned 1
	[0045.504] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68d3ff5a8*=0x1d8f, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68d3ff5a8*=0x1d90) returned 1
	[0045.504] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.504] WriteFile (in: hFile=0x7c8, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0xe68d3ff5b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68d3ff5b0*=0x1d90, lpOverlapped=0x0) returned 1
	[0045.504] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d3ff5e8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d3ff5b4, lpOverlapped=0x0 | out: lpBuffer=0xe68d3ff5e8*, lpNumberOfBytesWritten=0xe68d3ff5b4*=0x6, lpOverlapped=0x0) returned 1
	[0045.504] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d3ff5c0 | out: pbData=0x0*, pdwDataLen=0xe68d3ff5c0*=0x10c) returned 1
	[0045.504] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d3ff640, pdwDataLen=0xe68d3ff5c0 | out: pbData=0xe68d3ff640*, pdwDataLen=0xe68d3ff5c0*=0x10c) returned 1
	[0045.504] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d3ff640*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d3ff5b4, lpOverlapped=0x0 | out: lpBuffer=0xe68d3ff640*, lpNumberOfBytesWritten=0xe68d3ff5b4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.504] CloseHandle (hObject=0x7c8) returned 1
	[0045.521] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.525] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 143
	os_tid = 0xd5c

	[0045.459] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0045.460] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.460] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d47fb18 | out: lpFileSize=0xe68d47fb18*=74214) returned 1
	[0045.460] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d47fb30 | out: lpFileSize=0xe68d47fb30*=74214) returned 1
	[0045.460] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0x120c4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.460] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d47fb80, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d47fb40, lpOverlapped=0x0 | out: lpBuffer=0xe68d47fb80*, lpNumberOfBytesRead=0xe68d47fb40*=0x19, lpOverlapped=0x0) returned 1
	[0045.470] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.470] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d47fb00 | out: phKey=0xe68d47fb00*=0x274ba5c12f0) returned 1
	[0045.470] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0045.470] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.470] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x121e6, lpNumberOfBytesRead=0xe68d47fb10, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68d47fb10*=0x121e6, lpOverlapped=0x0) returned 1
	[0045.478] CryptEncrypt (in: hKey=0x274ba5c12f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d47fb0c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d47fb0c*=0xf4250) returned 1
	[0045.478] CryptEncrypt (in: hKey=0x274ba5c12f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68d47fb08*=0x121e6, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68d47fb08*=0x121f0) returned 1
	[0045.478] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.479] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0xe68d47fb10, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68d47fb10*=0x121f0, lpOverlapped=0x0) returned 1
	[0045.479] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d47fb48*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d47fb14, lpOverlapped=0x0 | out: lpBuffer=0xe68d47fb48*, lpNumberOfBytesWritten=0xe68d47fb14*=0x6, lpOverlapped=0x0) returned 1
	[0045.479] CryptExportKey (in: hKey=0x274ba5c12f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d47fb20 | out: pbData=0x0*, pdwDataLen=0xe68d47fb20*=0x10c) returned 1
	[0045.479] CryptExportKey (in: hKey=0x274ba5c12f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d47fba0, pdwDataLen=0xe68d47fb20 | out: pbData=0xe68d47fba0*, pdwDataLen=0xe68d47fb20*=0x10c) returned 1
	[0045.479] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d47fba0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d47fb14, lpOverlapped=0x0 | out: lpBuffer=0xe68d47fba0*, lpNumberOfBytesWritten=0xe68d47fb14*=0x10c, lpOverlapped=0x0) returned 1
	[0045.479] CloseHandle (hObject=0x78c) returned 1
	[0045.499] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.503] CryptDestroyKey (hKey=0x274ba5c12f0) returned 1

Thread:
	id = 144
	os_tid = 0xf54

	[0045.537] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0045.538] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7c8
	[0045.538] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d4ff598 | out: lpFileSize=0xe68d4ff598*=6309) returned 1
	[0045.538] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0xe68d4ff5b0 | out: lpFileSize=0xe68d4ff5b0*=6309) returned 1
	[0045.538] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x1783, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.538] ReadFile (in: hFile=0x7c8, lpBuffer=0xe68d4ff600, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d4ff5c0, lpOverlapped=0x0 | out: lpBuffer=0xe68d4ff600*, lpNumberOfBytesRead=0xe68d4ff5c0*=0x19, lpOverlapped=0x0) returned 1
	[0045.546] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.546] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d4ff580 | out: phKey=0xe68d4ff580*=0x274ba5c1590) returned 1
	[0045.546] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.546] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.546] ReadFile (in: hFile=0x7c8, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0xe68d4ff590, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d4ff590*=0x18a5, lpOverlapped=0x0) returned 1
	[0045.678] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d4ff58c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d4ff58c*=0xf4250) returned 1
	[0045.678] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d4ff588*=0x18a5, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d4ff588*=0x18b0) returned 1
	[0045.678] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.678] WriteFile (in: hFile=0x7c8, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0xe68d4ff590, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d4ff590*=0x18b0, lpOverlapped=0x0) returned 1
	[0045.678] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d4ff5c8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d4ff594, lpOverlapped=0x0 | out: lpBuffer=0xe68d4ff5c8*, lpNumberOfBytesWritten=0xe68d4ff594*=0x6, lpOverlapped=0x0) returned 1
	[0045.678] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d4ff5a0 | out: pbData=0x0*, pdwDataLen=0xe68d4ff5a0*=0x10c) returned 1
	[0045.678] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d4ff620, pdwDataLen=0xe68d4ff5a0 | out: pbData=0xe68d4ff620*, pdwDataLen=0xe68d4ff5a0*=0x10c) returned 1
	[0045.678] WriteFile (in: hFile=0x7c8, lpBuffer=0xe68d4ff620*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d4ff594, lpOverlapped=0x0 | out: lpBuffer=0xe68d4ff620*, lpNumberOfBytesWritten=0xe68d4ff594*=0x10c, lpOverlapped=0x0) returned 1
	[0045.678] CloseHandle (hObject=0x7c8) returned 1
	[0045.695] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.699] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 145
	os_tid = 0x788

	[0045.539] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0045.539] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.539] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d57f978 | out: lpFileSize=0xe68d57f978*=60816) returned 1
	[0045.539] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d57f990 | out: lpFileSize=0xe68d57f990*=60816) returned 1
	[0045.539] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0xec6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.539] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d57f9e0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d57f9a0, lpOverlapped=0x0 | out: lpBuffer=0xe68d57f9e0*, lpNumberOfBytesRead=0xe68d57f9a0*=0x19, lpOverlapped=0x0) returned 1
	[0045.674] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.674] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d57f960 | out: phKey=0xe68d57f960*=0x274ba5c1910) returned 1
	[0045.674] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0045.675] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.675] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0xe68d57f970, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68d57f970*=0xed90, lpOverlapped=0x0) returned 1
	[0045.722] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d57f96c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d57f96c*=0xf4250) returned 1
	[0045.722] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68d57f968*=0xed90, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68d57f968*=0xeda0) returned 1
	[0045.722] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.722] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0xe68d57f970, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68d57f970*=0xeda0, lpOverlapped=0x0) returned 1
	[0045.722] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d57f9a8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d57f974, lpOverlapped=0x0 | out: lpBuffer=0xe68d57f9a8*, lpNumberOfBytesWritten=0xe68d57f974*=0x6, lpOverlapped=0x0) returned 1
	[0045.722] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d57f980 | out: pbData=0x0*, pdwDataLen=0xe68d57f980*=0x10c) returned 1
	[0045.722] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d57fa00, pdwDataLen=0xe68d57f980 | out: pbData=0xe68d57fa00*, pdwDataLen=0xe68d57f980*=0x10c) returned 1
	[0045.722] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d57fa00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d57f974, lpOverlapped=0x0 | out: lpBuffer=0xe68d57fa00*, lpNumberOfBytesWritten=0xe68d57f974*=0x10c, lpOverlapped=0x0) returned 1
	[0045.722] CloseHandle (hObject=0x78c) returned 1
	[0045.796] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.800] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 146
	os_tid = 0x15c

	[0045.540] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0045.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x790
	[0045.541] GetFileSizeEx (in: hFile=0x790, lpFileSize=0xe68d5ff8b8 | out: lpFileSize=0xe68d5ff8b8*=3726) returned 1
	[0045.541] GetFileSizeEx (in: hFile=0x790, lpFileSize=0xe68d5ff8d0 | out: lpFileSize=0xe68d5ff8d0*=3726) returned 1
	[0045.541] SetFilePointerEx (in: hFile=0x790, liDistanceToMove=0xd6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.541] ReadFile (in: hFile=0x790, lpBuffer=0xe68d5ff920, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d5ff8e0, lpOverlapped=0x0 | out: lpBuffer=0xe68d5ff920*, lpNumberOfBytesRead=0xe68d5ff8e0*=0x19, lpOverlapped=0x0) returned 1
	[0045.650] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.650] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d5ff8a0 | out: phKey=0xe68d5ff8a0*=0x274ba5c1910) returned 1
	[0045.651] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0045.651] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.651] ReadFile (in: hFile=0x790, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xe8e, lpNumberOfBytesRead=0xe68d5ff8b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68d5ff8b0*=0xe8e, lpOverlapped=0x0) returned 1
	[0045.651] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d5ff8ac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d5ff8ac*=0xf4250) returned 1
	[0045.651] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68d5ff8a8*=0xe8e, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68d5ff8a8*=0xe90) returned 1
	[0045.651] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.651] WriteFile (in: hFile=0x790, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0xe68d5ff8b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68d5ff8b0*=0xe90, lpOverlapped=0x0) returned 1
	[0045.651] WriteFile (in: hFile=0x790, lpBuffer=0xe68d5ff8e8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d5ff8b4, lpOverlapped=0x0 | out: lpBuffer=0xe68d5ff8e8*, lpNumberOfBytesWritten=0xe68d5ff8b4*=0x6, lpOverlapped=0x0) returned 1
	[0045.651] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d5ff8c0 | out: pbData=0x0*, pdwDataLen=0xe68d5ff8c0*=0x10c) returned 1
	[0045.651] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d5ff940, pdwDataLen=0xe68d5ff8c0 | out: pbData=0xe68d5ff940*, pdwDataLen=0xe68d5ff8c0*=0x10c) returned 1
	[0045.651] WriteFile (in: hFile=0x790, lpBuffer=0xe68d5ff940*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d5ff8b4, lpOverlapped=0x0 | out: lpBuffer=0xe68d5ff940*, lpNumberOfBytesWritten=0xe68d5ff8b4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.651] CloseHandle (hObject=0x790) returned 1
	[0045.670] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.674] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 147
	os_tid = 0xe60

	[0045.542] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0045.542] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0
	[0045.542] GetFileSizeEx (in: hFile=0x7d0, lpFileSize=0xe68d67fa48 | out: lpFileSize=0xe68d67fa48*=80970) returned 1
	[0045.542] GetFileSizeEx (in: hFile=0x7d0, lpFileSize=0xe68d67fa60 | out: lpFileSize=0xe68d67fa60*=80970) returned 1
	[0045.542] SetFilePointerEx (in: hFile=0x7d0, liDistanceToMove=0x13b28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.542] ReadFile (in: hFile=0x7d0, lpBuffer=0xe68d67fab0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d67fa70, lpOverlapped=0x0 | out: lpBuffer=0xe68d67fab0*, lpNumberOfBytesRead=0xe68d67fa70*=0x19, lpOverlapped=0x0) returned 1
	[0045.649] SetFilePointer (in: hFile=0x7d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.649] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d67fa30 | out: phKey=0xe68d67fa30*=0x274ba5c16e0) returned 1
	[0045.649] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0045.649] SetFilePointer (in: hFile=0x7d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.649] ReadFile (in: hFile=0x7d0, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x13c4a, lpNumberOfBytesRead=0xe68d67fa40, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68d67fa40*=0x13c4a, lpOverlapped=0x0) returned 1
	[0045.700] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d67fa3c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d67fa3c*=0xf4250) returned 1
	[0045.700] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68d67fa38*=0x13c4a, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68d67fa38*=0x13c50) returned 1
	[0045.700] SetFilePointer (in: hFile=0x7d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.700] WriteFile (in: hFile=0x7d0, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0xe68d67fa40, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68d67fa40*=0x13c50, lpOverlapped=0x0) returned 1
	[0045.700] WriteFile (in: hFile=0x7d0, lpBuffer=0xe68d67fa78*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d67fa44, lpOverlapped=0x0 | out: lpBuffer=0xe68d67fa78*, lpNumberOfBytesWritten=0xe68d67fa44*=0x6, lpOverlapped=0x0) returned 1
	[0045.700] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d67fa50 | out: pbData=0x0*, pdwDataLen=0xe68d67fa50*=0x10c) returned 1
	[0045.700] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d67fad0, pdwDataLen=0xe68d67fa50 | out: pbData=0xe68d67fad0*, pdwDataLen=0xe68d67fa50*=0x10c) returned 1
	[0045.701] WriteFile (in: hFile=0x7d0, lpBuffer=0xe68d67fad0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d67fa44, lpOverlapped=0x0 | out: lpBuffer=0xe68d67fad0*, lpNumberOfBytesWritten=0xe68d67fa44*=0x10c, lpOverlapped=0x0) returned 1
	[0045.701] CloseHandle (hObject=0x7d0) returned 1
	[0045.717] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.721] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 148
	os_tid = 0xedc

	[0045.545] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0045.801] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d4
	[0045.801] GetFileSizeEx (in: hFile=0x7d4, lpFileSize=0xe68d6ffc58 | out: lpFileSize=0xe68d6ffc58*=3314) returned 1
	[0045.801] GetFileSizeEx (in: hFile=0x7d4, lpFileSize=0xe68d6ffc70 | out: lpFileSize=0xe68d6ffc70*=3314) returned 1
	[0045.801] SetFilePointerEx (in: hFile=0x7d4, liDistanceToMove=0xbd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.801] ReadFile (in: hFile=0x7d4, lpBuffer=0xe68d6ffcc0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d6ffc80, lpOverlapped=0x0 | out: lpBuffer=0xe68d6ffcc0*, lpNumberOfBytesRead=0xe68d6ffc80*=0x19, lpOverlapped=0x0) returned 1
	[0045.802] SetFilePointer (in: hFile=0x7d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.802] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d6ffc40 | out: phKey=0xe68d6ffc40*=0x274ba5c1910) returned 1
	[0045.802] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.803] SetFilePointer (in: hFile=0x7d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.803] ReadFile (in: hFile=0x7d4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xcf2, lpNumberOfBytesRead=0xe68d6ffc50, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d6ffc50*=0xcf2, lpOverlapped=0x0) returned 1
	[0045.803] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d6ffc4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d6ffc4c*=0xf4250) returned 1
	[0045.803] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d6ffc48*=0xcf2, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d6ffc48*=0xd00) returned 1
	[0045.803] SetFilePointer (in: hFile=0x7d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.803] WriteFile (in: hFile=0x7d4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0xe68d6ffc50, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d6ffc50*=0xd00, lpOverlapped=0x0) returned 1
	[0045.803] WriteFile (in: hFile=0x7d4, lpBuffer=0xe68d6ffc88*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d6ffc54, lpOverlapped=0x0 | out: lpBuffer=0xe68d6ffc88*, lpNumberOfBytesWritten=0xe68d6ffc54*=0x6, lpOverlapped=0x0) returned 1
	[0045.803] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d6ffc60 | out: pbData=0x0*, pdwDataLen=0xe68d6ffc60*=0x10c) returned 1
	[0045.803] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d6ffce0, pdwDataLen=0xe68d6ffc60 | out: pbData=0xe68d6ffce0*, pdwDataLen=0xe68d6ffc60*=0x10c) returned 1
	[0045.803] WriteFile (in: hFile=0x7d4, lpBuffer=0xe68d6ffce0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d6ffc54, lpOverlapped=0x0 | out: lpBuffer=0xe68d6ffce0*, lpNumberOfBytesWritten=0xe68d6ffc54*=0x10c, lpOverlapped=0x0) returned 1
	[0045.803] CloseHandle (hObject=0x7d4) returned 1
	[0045.819] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.823] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 149
	os_tid = 0xeec

	[0045.802] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0045.824] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d4
	[0045.824] GetFileSizeEx (in: hFile=0x7d4, lpFileSize=0xe68d77faf8 | out: lpFileSize=0xe68d77faf8*=77748) returned 1
	[0045.824] GetFileSizeEx (in: hFile=0x7d4, lpFileSize=0xe68d77fb10 | out: lpFileSize=0xe68d77fb10*=77748) returned 1
	[0045.824] SetFilePointerEx (in: hFile=0x7d4, liDistanceToMove=0x12e92, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.824] ReadFile (in: hFile=0x7d4, lpBuffer=0xe68d77fb60, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d77fb20, lpOverlapped=0x0 | out: lpBuffer=0xe68d77fb60*, lpNumberOfBytesRead=0xe68d77fb20*=0x19, lpOverlapped=0x0) returned 1
	[0045.856] SetFilePointer (in: hFile=0x7d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.856] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d77fae0 | out: phKey=0xe68d77fae0*=0x274ba5c16e0) returned 1
	[0045.856] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0045.857] SetFilePointer (in: hFile=0x7d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.857] ReadFile (in: hFile=0x7d4, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x12fb4, lpNumberOfBytesRead=0xe68d77faf0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68d77faf0*=0x12fb4, lpOverlapped=0x0) returned 1
	[0045.889] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d77faec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d77faec*=0xf4250) returned 1
	[0045.889] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68d77fae8*=0x12fb4, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68d77fae8*=0x12fc0) returned 1
	[0045.889] SetFilePointer (in: hFile=0x7d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.889] WriteFile (in: hFile=0x7d4, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0xe68d77faf0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68d77faf0*=0x12fc0, lpOverlapped=0x0) returned 1
	[0045.889] WriteFile (in: hFile=0x7d4, lpBuffer=0xe68d77fb28*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d77faf4, lpOverlapped=0x0 | out: lpBuffer=0xe68d77fb28*, lpNumberOfBytesWritten=0xe68d77faf4*=0x6, lpOverlapped=0x0) returned 1
	[0045.889] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d77fb00 | out: pbData=0x0*, pdwDataLen=0xe68d77fb00*=0x10c) returned 1
	[0045.889] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d77fb80, pdwDataLen=0xe68d77fb00 | out: pbData=0xe68d77fb80*, pdwDataLen=0xe68d77fb00*=0x10c) returned 1
	[0045.889] WriteFile (in: hFile=0x7d4, lpBuffer=0xe68d77fb80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d77faf4, lpOverlapped=0x0 | out: lpBuffer=0xe68d77fb80*, lpNumberOfBytesWritten=0xe68d77faf4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.890] CloseHandle (hObject=0x7d4) returned 1
	[0045.906] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.910] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 150
	os_tid = 0x4a8

	[0045.825] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0045.825] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.825] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d7ff8d8 | out: lpFileSize=0xe68d7ff8d8*=3419) returned 1
	[0045.825] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d7ff8f0 | out: lpFileSize=0xe68d7ff8f0*=3419) returned 1
	[0045.825] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0xc39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.825] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d7ff940, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d7ff900, lpOverlapped=0x0 | out: lpBuffer=0xe68d7ff940*, lpNumberOfBytesRead=0xe68d7ff900*=0x19, lpOverlapped=0x0) returned 1
	[0045.831] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.831] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d7ff8c0 | out: phKey=0xe68d7ff8c0*=0x274ba5c1590) returned 1
	[0045.831] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.831] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.831] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xd5b, lpNumberOfBytesRead=0xe68d7ff8d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d7ff8d0*=0xd5b, lpOverlapped=0x0) returned 1
	[0045.832] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d7ff8cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d7ff8cc*=0xf4250) returned 1
	[0045.832] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d7ff8c8*=0xd5b, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d7ff8c8*=0xd60) returned 1
	[0045.832] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.832] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0xe68d7ff8d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d7ff8d0*=0xd60, lpOverlapped=0x0) returned 1
	[0045.832] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d7ff908*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d7ff8d4, lpOverlapped=0x0 | out: lpBuffer=0xe68d7ff908*, lpNumberOfBytesWritten=0xe68d7ff8d4*=0x6, lpOverlapped=0x0) returned 1
	[0045.832] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d7ff8e0 | out: pbData=0x0*, pdwDataLen=0xe68d7ff8e0*=0x10c) returned 1
	[0045.832] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d7ff960, pdwDataLen=0xe68d7ff8e0 | out: pbData=0xe68d7ff960*, pdwDataLen=0xe68d7ff8e0*=0x10c) returned 1
	[0045.832] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d7ff960*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d7ff8d4, lpOverlapped=0x0 | out: lpBuffer=0xe68d7ff960*, lpNumberOfBytesWritten=0xe68d7ff8d4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.832] CloseHandle (hObject=0x78c) returned 1
	[0045.848] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.852] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 151
	os_tid = 0x4f0

	[0045.826] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0045.826] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x7d0
	[0045.826] GetFileSizeEx (in: hFile=0x7d0, lpFileSize=0xe68d87f6c8 | out: lpFileSize=0xe68d87f6c8*=82346) returned 1
	[0045.826] GetFileSizeEx (in: hFile=0x7d0, lpFileSize=0xe68d87f6e0 | out: lpFileSize=0xe68d87f6e0*=82346) returned 1
	[0045.826] SetFilePointerEx (in: hFile=0x7d0, liDistanceToMove=0x14088, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.826] ReadFile (in: hFile=0x7d0, lpBuffer=0xe68d87f730, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d87f6f0, lpOverlapped=0x0 | out: lpBuffer=0xe68d87f730*, lpNumberOfBytesRead=0xe68d87f6f0*=0x19, lpOverlapped=0x0) returned 1
	[0045.855] SetFilePointer (in: hFile=0x7d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.855] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d87f6b0 | out: phKey=0xe68d87f6b0*=0x274ba5c1590) returned 1
	[0045.855] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.855] SetFilePointer (in: hFile=0x7d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.855] ReadFile (in: hFile=0x7d0, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x141aa, lpNumberOfBytesRead=0xe68d87f6c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d87f6c0*=0x141aa, lpOverlapped=0x0) returned 1
	[0045.865] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d87f6bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d87f6bc*=0xf4250) returned 1
	[0045.865] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d87f6b8*=0x141aa, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d87f6b8*=0x141b0) returned 1
	[0045.865] SetFilePointer (in: hFile=0x7d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.865] WriteFile (in: hFile=0x7d0, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0xe68d87f6c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d87f6c0*=0x141b0, lpOverlapped=0x0) returned 1
	[0045.865] WriteFile (in: hFile=0x7d0, lpBuffer=0xe68d87f6f8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d87f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe68d87f6f8*, lpNumberOfBytesWritten=0xe68d87f6c4*=0x6, lpOverlapped=0x0) returned 1
	[0045.865] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d87f6d0 | out: pbData=0x0*, pdwDataLen=0xe68d87f6d0*=0x10c) returned 1
	[0045.865] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d87f750, pdwDataLen=0xe68d87f6d0 | out: pbData=0xe68d87f750*, pdwDataLen=0xe68d87f6d0*=0x10c) returned 1
	[0045.865] WriteFile (in: hFile=0x7d0, lpBuffer=0xe68d87f750*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d87f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe68d87f750*, lpNumberOfBytesWritten=0xe68d87f6c4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.866] CloseHandle (hObject=0x7d0) returned 1
	[0045.881] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.885] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 152
	os_tid = 0x36c

	[0045.827] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0045.936] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0045.936] GetFileSizeEx (in: hFile=0x804, lpFileSize=0xe68d8ffb98 | out: lpFileSize=0xe68d8ffb98*=8876) returned 1
	[0045.936] GetFileSizeEx (in: hFile=0x804, lpFileSize=0xe68d8ffbb0 | out: lpFileSize=0xe68d8ffbb0*=8876) returned 1
	[0045.936] SetFilePointerEx (in: hFile=0x804, liDistanceToMove=0x218a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.959] ReadFile (in: hFile=0x804, lpBuffer=0xe68d8ffc00, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d8ffbc0, lpOverlapped=0x0 | out: lpBuffer=0xe68d8ffc00*, lpNumberOfBytesRead=0xe68d8ffbc0*=0x19, lpOverlapped=0x0) returned 1
	[0045.982] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.982] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d8ffb80 | out: phKey=0xe68d8ffb80*=0x274ba5c1590) returned 1
	[0045.982] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.982] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.982] ReadFile (in: hFile=0x804, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x22ac, lpNumberOfBytesRead=0xe68d8ffb90, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d8ffb90*=0x22ac, lpOverlapped=0x0) returned 1
	[0045.990] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d8ffb8c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d8ffb8c*=0xf4250) returned 1
	[0045.990] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d8ffb88*=0x22ac, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d8ffb88*=0x22b0) returned 1
	[0045.990] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.990] WriteFile (in: hFile=0x804, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0xe68d8ffb90, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d8ffb90*=0x22b0, lpOverlapped=0x0) returned 1
	[0045.990] WriteFile (in: hFile=0x804, lpBuffer=0xe68d8ffbc8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d8ffb94, lpOverlapped=0x0 | out: lpBuffer=0xe68d8ffbc8*, lpNumberOfBytesWritten=0xe68d8ffb94*=0x6, lpOverlapped=0x0) returned 1
	[0045.990] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d8ffba0 | out: pbData=0x0*, pdwDataLen=0xe68d8ffba0*=0x10c) returned 1
	[0045.990] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d8ffc20, pdwDataLen=0xe68d8ffba0 | out: pbData=0xe68d8ffc20*, pdwDataLen=0xe68d8ffba0*=0x10c) returned 1
	[0045.990] WriteFile (in: hFile=0x804, lpBuffer=0xe68d8ffc20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d8ffb94, lpOverlapped=0x0 | out: lpBuffer=0xe68d8ffc20*, lpNumberOfBytesWritten=0xe68d8ffb94*=0x10c, lpOverlapped=0x0) returned 1
	[0045.990] CloseHandle (hObject=0x804) returned 1
	[0046.006] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.010] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 153
	os_tid = 0x4e4

	[0045.828] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0045.933] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0045.934] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d97f8f8 | out: lpFileSize=0xe68d97f8f8*=86284) returned 1
	[0045.934] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68d97f910 | out: lpFileSize=0xe68d97f910*=86284) returned 1
	[0045.934] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0x14fea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0045.934] ReadFile (in: hFile=0x78c, lpBuffer=0xe68d97f960, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d97f920, lpOverlapped=0x0 | out: lpBuffer=0xe68d97f960*, lpNumberOfBytesRead=0xe68d97f920*=0x19, lpOverlapped=0x0) returned 1
	[0045.935] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.935] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d97f8e0 | out: phKey=0xe68d97f8e0*=0x274ba5c1590) returned 1
	[0045.935] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0045.935] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.935] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x1510c, lpNumberOfBytesRead=0xe68d97f8f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d97f8f0*=0x1510c, lpOverlapped=0x0) returned 1
	[0045.937] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d97f8ec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d97f8ec*=0xf4250) returned 1
	[0045.937] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d97f8e8*=0x1510c, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d97f8e8*=0x15110) returned 1
	[0045.937] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0045.937] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0xe68d97f8f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d97f8f0*=0x15110, lpOverlapped=0x0) returned 1
	[0045.938] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d97f928*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d97f8f4, lpOverlapped=0x0 | out: lpBuffer=0xe68d97f928*, lpNumberOfBytesWritten=0xe68d97f8f4*=0x6, lpOverlapped=0x0) returned 1
	[0045.938] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d97f900 | out: pbData=0x0*, pdwDataLen=0xe68d97f900*=0x10c) returned 1
	[0045.938] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d97f980, pdwDataLen=0xe68d97f900 | out: pbData=0xe68d97f980*, pdwDataLen=0xe68d97f900*=0x10c) returned 1
	[0045.938] WriteFile (in: hFile=0x78c, lpBuffer=0xe68d97f980*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d97f8f4, lpOverlapped=0x0 | out: lpBuffer=0xe68d97f980*, lpNumberOfBytesWritten=0xe68d97f8f4*=0x10c, lpOverlapped=0x0) returned 1
	[0045.938] CloseHandle (hObject=0x78c) returned 1
	[0045.954] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0045.958] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 160
	os_tid = 0x37c

	[0046.070] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.071] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0046.071] GetFileSizeEx (in: hFile=0x804, lpFileSize=0xe68d9ff7b8 | out: lpFileSize=0xe68d9ff7b8*=3188) returned 1
	[0046.071] GetFileSizeEx (in: hFile=0x804, lpFileSize=0xe68d9ff7d0 | out: lpFileSize=0xe68d9ff7d0*=3188) returned 1
	[0046.071] SetFilePointerEx (in: hFile=0x804, liDistanceToMove=0xb52, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.071] ReadFile (in: hFile=0x804, lpBuffer=0xe68d9ff820, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68d9ff7e0, lpOverlapped=0x0 | out: lpBuffer=0xe68d9ff820*, lpNumberOfBytesRead=0xe68d9ff7e0*=0x19, lpOverlapped=0x0) returned 1
	[0046.099] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.099] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68d9ff7a0 | out: phKey=0xe68d9ff7a0*=0x274ba5c1590) returned 1
	[0046.099] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.100] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.100] ReadFile (in: hFile=0x804, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xc74, lpNumberOfBytesRead=0xe68d9ff7b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68d9ff7b0*=0xc74, lpOverlapped=0x0) returned 1
	[0046.100] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68d9ff7ac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68d9ff7ac*=0xf4250) returned 1
	[0046.100] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68d9ff7a8*=0xc74, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68d9ff7a8*=0xc80) returned 1
	[0046.100] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.100] WriteFile (in: hFile=0x804, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0xe68d9ff7b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68d9ff7b0*=0xc80, lpOverlapped=0x0) returned 1
	[0046.100] WriteFile (in: hFile=0x804, lpBuffer=0xe68d9ff7e8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68d9ff7b4, lpOverlapped=0x0 | out: lpBuffer=0xe68d9ff7e8*, lpNumberOfBytesWritten=0xe68d9ff7b4*=0x6, lpOverlapped=0x0) returned 1
	[0046.100] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68d9ff7c0 | out: pbData=0x0*, pdwDataLen=0xe68d9ff7c0*=0x10c) returned 1
	[0046.100] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68d9ff840, pdwDataLen=0xe68d9ff7c0 | out: pbData=0xe68d9ff840*, pdwDataLen=0xe68d9ff7c0*=0x10c) returned 1
	[0046.100] WriteFile (in: hFile=0x804, lpBuffer=0xe68d9ff840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68d9ff7b4, lpOverlapped=0x0 | out: lpBuffer=0xe68d9ff840*, lpNumberOfBytesWritten=0xe68d9ff7b4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.100] CloseHandle (hObject=0x804) returned 1
	[0046.117] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.121] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 161
	os_tid = 0x9e4

	[0046.072] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.072] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x78c
	[0046.072] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68da7f6a8 | out: lpFileSize=0xe68da7f6a8*=77232) returned 1
	[0046.072] GetFileSizeEx (in: hFile=0x78c, lpFileSize=0xe68da7f6c0 | out: lpFileSize=0xe68da7f6c0*=77232) returned 1
	[0046.072] SetFilePointerEx (in: hFile=0x78c, liDistanceToMove=0x12c8e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.072] ReadFile (in: hFile=0x78c, lpBuffer=0xe68da7f710, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68da7f6d0, lpOverlapped=0x0 | out: lpBuffer=0xe68da7f710*, lpNumberOfBytesRead=0xe68da7f6d0*=0x19, lpOverlapped=0x0) returned 1
	[0046.122] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.122] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68da7f690 | out: phKey=0xe68da7f690*=0x274ba5c1590) returned 1
	[0046.122] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.122] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.122] ReadFile (in: hFile=0x78c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x12db0, lpNumberOfBytesRead=0xe68da7f6a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68da7f6a0*=0x12db0, lpOverlapped=0x0) returned 1
	[0046.137] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68da7f69c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68da7f69c*=0xf4250) returned 1
	[0046.164] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68da7f698*=0x12db0, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68da7f698*=0x12dc0) returned 1
	[0046.164] SetFilePointer (in: hFile=0x78c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.164] WriteFile (in: hFile=0x78c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0xe68da7f6a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68da7f6a0*=0x12dc0, lpOverlapped=0x0) returned 1
	[0046.165] WriteFile (in: hFile=0x78c, lpBuffer=0xe68da7f6d8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68da7f6a4, lpOverlapped=0x0 | out: lpBuffer=0xe68da7f6d8*, lpNumberOfBytesWritten=0xe68da7f6a4*=0x6, lpOverlapped=0x0) returned 1
	[0046.165] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68da7f6b0 | out: pbData=0x0*, pdwDataLen=0xe68da7f6b0*=0x10c) returned 1
	[0046.165] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68da7f730, pdwDataLen=0xe68da7f6b0 | out: pbData=0xe68da7f730*, pdwDataLen=0xe68da7f6b0*=0x10c) returned 1
	[0046.165] WriteFile (in: hFile=0x78c, lpBuffer=0xe68da7f730*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68da7f6a4, lpOverlapped=0x0 | out: lpBuffer=0xe68da7f730*, lpNumberOfBytesWritten=0xe68da7f6a4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.165] CloseHandle (hObject=0x78c) returned 1
	[0046.182] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.186] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 162
	os_tid = 0x7bc

	[0046.073] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.073] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.073] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68daffc38 | out: lpFileSize=0xe68daffc38*=3702) returned 1
	[0046.074] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68daffc50 | out: lpFileSize=0xe68daffc50*=3702) returned 1
	[0046.074] SetFilePointerEx (in: hFile=0x808, liDistanceToMove=0xd54, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.074] ReadFile (in: hFile=0x808, lpBuffer=0xe68daffca0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68daffc60, lpOverlapped=0x0 | out: lpBuffer=0xe68daffca0*, lpNumberOfBytesRead=0xe68daffc60*=0x19, lpOverlapped=0x0) returned 1
	[0046.075] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.075] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68daffc20 | out: phKey=0xe68daffc20*=0x274ba5c1910) returned 1
	[0046.075] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.075] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.075] ReadFile (in: hFile=0x808, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xe76, lpNumberOfBytesRead=0xe68daffc30, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68daffc30*=0xe76, lpOverlapped=0x0) returned 1
	[0046.075] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68daffc2c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68daffc2c*=0xf4250) returned 1
	[0046.076] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68daffc28*=0xe76, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68daffc28*=0xe80) returned 1
	[0046.076] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.076] WriteFile (in: hFile=0x808, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0xe68daffc30, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68daffc30*=0xe80, lpOverlapped=0x0) returned 1
	[0046.076] WriteFile (in: hFile=0x808, lpBuffer=0xe68daffc68*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68daffc34, lpOverlapped=0x0 | out: lpBuffer=0xe68daffc68*, lpNumberOfBytesWritten=0xe68daffc34*=0x6, lpOverlapped=0x0) returned 1
	[0046.076] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68daffc40 | out: pbData=0x0*, pdwDataLen=0xe68daffc40*=0x10c) returned 1
	[0046.076] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68daffcc0, pdwDataLen=0xe68daffc40 | out: pbData=0xe68daffcc0*, pdwDataLen=0xe68daffc40*=0x10c) returned 1
	[0046.076] WriteFile (in: hFile=0x808, lpBuffer=0xe68daffcc0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68daffc34, lpOverlapped=0x0 | out: lpBuffer=0xe68daffcc0*, lpNumberOfBytesWritten=0xe68daffc34*=0x10c, lpOverlapped=0x0) returned 1
	[0046.076] CloseHandle (hObject=0x808) returned 1
	[0046.094] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.098] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 163
	os_tid = 0xcec

	[0046.074] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.123] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0046.123] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0xe68db7fc88 | out: lpFileSize=0xe68db7fc88*=77022) returned 1
	[0046.123] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0xe68db7fca0 | out: lpFileSize=0xe68db7fca0*=77022) returned 1
	[0046.124] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x12bbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.124] ReadFile (in: hFile=0x80c, lpBuffer=0xe68db7fcf0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68db7fcb0, lpOverlapped=0x0 | out: lpBuffer=0xe68db7fcf0*, lpNumberOfBytesRead=0xe68db7fcb0*=0x19, lpOverlapped=0x0) returned 1
	[0046.163] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.163] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68db7fc70 | out: phKey=0xe68db7fc70*=0x274ba5c0e90) returned 1
	[0046.163] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd590000
	[0046.163] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.163] ReadFile (in: hFile=0x80c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0x12cde, lpNumberOfBytesRead=0xe68db7fc80, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68db7fc80*=0x12cde, lpOverlapped=0x0) returned 1
	[0046.337] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68db7fc7c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68db7fc7c*=0xf4250) returned 1
	[0046.337] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68db7fc78*=0x12cde, dwBufLen=0xf4250 | out: pbData=0x274bd590000*, pdwDataLen=0xe68db7fc78*=0x12ce0) returned 1
	[0046.337] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.338] WriteFile (in: hFile=0x80c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0xe68db7fc80, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68db7fc80*=0x12ce0, lpOverlapped=0x0) returned 1
	[0046.338] WriteFile (in: hFile=0x80c, lpBuffer=0xe68db7fcb8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68db7fc84, lpOverlapped=0x0 | out: lpBuffer=0xe68db7fcb8*, lpNumberOfBytesWritten=0xe68db7fc84*=0x6, lpOverlapped=0x0) returned 1
	[0046.338] CryptExportKey (in: hKey=0x274ba5c0e90, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68db7fc90 | out: pbData=0x0*, pdwDataLen=0xe68db7fc90*=0x10c) returned 1
	[0046.338] CryptExportKey (in: hKey=0x274ba5c0e90, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68db7fd10, pdwDataLen=0xe68db7fc90 | out: pbData=0xe68db7fd10*, pdwDataLen=0xe68db7fc90*=0x10c) returned 1
	[0046.338] WriteFile (in: hFile=0x80c, lpBuffer=0xe68db7fd10*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68db7fc84, lpOverlapped=0x0 | out: lpBuffer=0xe68db7fd10*, lpNumberOfBytesWritten=0xe68db7fc84*=0x10c, lpOverlapped=0x0) returned 1
	[0046.338] CloseHandle (hObject=0x80c) returned 1
	[0046.360] VirtualFree (lpAddress=0x274bd590000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.364] CryptDestroyKey (hKey=0x274ba5c0e90) returned 1

Thread:
	id = 164
	os_tid = 0x658

	[0046.125] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.125] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x804
	[0046.125] GetFileSizeEx (in: hFile=0x804, lpFileSize=0xe68dbff978 | out: lpFileSize=0xe68dbff978*=3526) returned 1
	[0046.125] GetFileSizeEx (in: hFile=0x804, lpFileSize=0xe68dbff990 | out: lpFileSize=0xe68dbff990*=3526) returned 1
	[0046.125] SetFilePointerEx (in: hFile=0x804, liDistanceToMove=0xca4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.125] ReadFile (in: hFile=0x804, lpBuffer=0xe68dbff9e0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68dbff9a0, lpOverlapped=0x0 | out: lpBuffer=0xe68dbff9e0*, lpNumberOfBytesRead=0xe68dbff9a0*=0x19, lpOverlapped=0x0) returned 1
	[0046.136] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.136] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68dbff960 | out: phKey=0xe68dbff960*=0x274ba5c1c20) returned 1
	[0046.137] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0046.137] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.137] ReadFile (in: hFile=0x804, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xdc6, lpNumberOfBytesRead=0xe68dbff970, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68dbff970*=0xdc6, lpOverlapped=0x0) returned 1
	[0046.137] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68dbff96c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68dbff96c*=0xf4250) returned 1
	[0046.138] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68dbff968*=0xdc6, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68dbff968*=0xdd0) returned 1
	[0046.138] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.138] WriteFile (in: hFile=0x804, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0xe68dbff970, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68dbff970*=0xdd0, lpOverlapped=0x0) returned 1
	[0046.138] WriteFile (in: hFile=0x804, lpBuffer=0xe68dbff9a8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68dbff974, lpOverlapped=0x0 | out: lpBuffer=0xe68dbff9a8*, lpNumberOfBytesWritten=0xe68dbff974*=0x6, lpOverlapped=0x0) returned 1
	[0046.138] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68dbff980 | out: pbData=0x0*, pdwDataLen=0xe68dbff980*=0x10c) returned 1
	[0046.138] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68dbffa00, pdwDataLen=0xe68dbff980 | out: pbData=0xe68dbffa00*, pdwDataLen=0xe68dbff980*=0x10c) returned 1
	[0046.138] WriteFile (in: hFile=0x804, lpBuffer=0xe68dbffa00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68dbff974, lpOverlapped=0x0 | out: lpBuffer=0xe68dbffa00*, lpNumberOfBytesWritten=0xe68dbff974*=0x10c, lpOverlapped=0x0) returned 1
	[0046.138] CloseHandle (hObject=0x804) returned 1
	[0046.156] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.160] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 165
	os_tid = 0x7b4

	[0046.126] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.126] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.127] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68dc7fa28 | out: lpFileSize=0xe68dc7fa28*=82962) returned 1
	[0046.127] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68dc7fa40 | out: lpFileSize=0xe68dc7fa40*=82962) returned 1
	[0046.127] SetFilePointerEx (in: hFile=0x808, liDistanceToMove=0x142f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.127] ReadFile (in: hFile=0x808, lpBuffer=0xe68dc7fa90, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68dc7fa50, lpOverlapped=0x0 | out: lpBuffer=0xe68dc7fa90*, lpNumberOfBytesRead=0xe68dc7fa50*=0x19, lpOverlapped=0x0) returned 1
	[0046.161] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.161] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68dc7fa10 | out: phKey=0xe68dc7fa10*=0x274ba5c1c20) returned 1
	[0046.161] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0046.161] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.161] ReadFile (in: hFile=0x808, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x14412, lpNumberOfBytesRead=0xe68dc7fa20, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68dc7fa20*=0x14412, lpOverlapped=0x0) returned 1
	[0046.303] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68dc7fa1c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68dc7fa1c*=0xf4250) returned 1
	[0046.303] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68dc7fa18*=0x14412, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68dc7fa18*=0x14420) returned 1
	[0046.303] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.304] WriteFile (in: hFile=0x808, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0xe68dc7fa20, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68dc7fa20*=0x14420, lpOverlapped=0x0) returned 1
	[0046.304] WriteFile (in: hFile=0x808, lpBuffer=0xe68dc7fa58*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68dc7fa24, lpOverlapped=0x0 | out: lpBuffer=0xe68dc7fa58*, lpNumberOfBytesWritten=0xe68dc7fa24*=0x6, lpOverlapped=0x0) returned 1
	[0046.304] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68dc7fa30 | out: pbData=0x0*, pdwDataLen=0xe68dc7fa30*=0x10c) returned 1
	[0046.304] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68dc7fab0, pdwDataLen=0xe68dc7fa30 | out: pbData=0xe68dc7fab0*, pdwDataLen=0xe68dc7fa30*=0x10c) returned 1
	[0046.304] WriteFile (in: hFile=0x808, lpBuffer=0xe68dc7fab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68dc7fa24, lpOverlapped=0x0 | out: lpBuffer=0xe68dc7fab0*, lpNumberOfBytesWritten=0xe68dc7fa24*=0x10c, lpOverlapped=0x0) returned 1
	[0046.304] CloseHandle (hObject=0x808) returned 1
	[0046.333] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.337] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 166
	os_tid = 0xcdc

	[0046.128] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.128] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x810
	[0046.128] GetFileSizeEx (in: hFile=0x810, lpFileSize=0xe68dcff788 | out: lpFileSize=0xe68dcff788*=6851) returned 1
	[0046.128] GetFileSizeEx (in: hFile=0x810, lpFileSize=0xe68dcff7a0 | out: lpFileSize=0xe68dcff7a0*=6851) returned 1
	[0046.128] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x19a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.128] ReadFile (in: hFile=0x810, lpBuffer=0xe68dcff7f0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68dcff7b0, lpOverlapped=0x0 | out: lpBuffer=0xe68dcff7f0*, lpNumberOfBytesRead=0xe68dcff7b0*=0x19, lpOverlapped=0x0) returned 1
	[0046.162] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.162] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68dcff770 | out: phKey=0xe68dcff770*=0x274ba5c16e0) returned 1
	[0046.162] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0046.162] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.163] ReadFile (in: hFile=0x810, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x1ac3, lpNumberOfBytesRead=0xe68dcff780, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68dcff780*=0x1ac3, lpOverlapped=0x0) returned 1
	[0046.255] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68dcff77c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68dcff77c*=0xf4250) returned 1
	[0046.255] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68dcff778*=0x1ac3, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68dcff778*=0x1ad0) returned 1
	[0046.255] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.255] WriteFile (in: hFile=0x810, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0xe68dcff780, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68dcff780*=0x1ad0, lpOverlapped=0x0) returned 1
	[0046.255] WriteFile (in: hFile=0x810, lpBuffer=0xe68dcff7b8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68dcff784, lpOverlapped=0x0 | out: lpBuffer=0xe68dcff7b8*, lpNumberOfBytesWritten=0xe68dcff784*=0x6, lpOverlapped=0x0) returned 1
	[0046.255] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68dcff790 | out: pbData=0x0*, pdwDataLen=0xe68dcff790*=0x10c) returned 1
	[0046.255] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68dcff810, pdwDataLen=0xe68dcff790 | out: pbData=0xe68dcff810*, pdwDataLen=0xe68dcff790*=0x10c) returned 1
	[0046.255] WriteFile (in: hFile=0x810, lpBuffer=0xe68dcff810*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68dcff784, lpOverlapped=0x0 | out: lpBuffer=0xe68dcff810*, lpNumberOfBytesWritten=0xe68dcff784*=0x10c, lpOverlapped=0x0) returned 1
	[0046.255] CloseHandle (hObject=0x810) returned 1
	[0046.272] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.276] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 167
	os_tid = 0xd40

	[0046.129] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.130] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x814
	[0046.130] GetFileSizeEx (in: hFile=0x814, lpFileSize=0xe68dd7f9e8 | out: lpFileSize=0xe68dd7f9e8*=72076) returned 1
	[0046.130] GetFileSizeEx (in: hFile=0x814, lpFileSize=0xe68dd7fa00 | out: lpFileSize=0xe68dd7fa00*=72076) returned 1
	[0046.130] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x1186a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.130] ReadFile (in: hFile=0x814, lpBuffer=0xe68dd7fa50, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68dd7fa10, lpOverlapped=0x0 | out: lpBuffer=0xe68dd7fa50*, lpNumberOfBytesRead=0xe68dd7fa10*=0x19, lpOverlapped=0x0) returned 1
	[0046.187] SetFilePointer (in: hFile=0x814, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.187] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68dd7f9d0 | out: phKey=0xe68dd7f9d0*=0x274ba5c1210) returned 1
	[0046.187] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd690000
	[0046.187] SetFilePointer (in: hFile=0x814, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.187] ReadFile (in: hFile=0x814, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0x1198c, lpNumberOfBytesRead=0xe68dd7f9e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68dd7f9e0*=0x1198c, lpOverlapped=0x0) returned 1
	[0046.276] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68dd7f9dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68dd7f9dc*=0xf4250) returned 1
	[0046.276] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68dd7f9d8*=0x1198c, dwBufLen=0xf4250 | out: pbData=0x274bd690000*, pdwDataLen=0xe68dd7f9d8*=0x11990) returned 1
	[0046.276] SetFilePointer (in: hFile=0x814, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.277] WriteFile (in: hFile=0x814, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0xe68dd7f9e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68dd7f9e0*=0x11990, lpOverlapped=0x0) returned 1
	[0046.277] WriteFile (in: hFile=0x814, lpBuffer=0xe68dd7fa18*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68dd7f9e4, lpOverlapped=0x0 | out: lpBuffer=0xe68dd7fa18*, lpNumberOfBytesWritten=0xe68dd7f9e4*=0x6, lpOverlapped=0x0) returned 1
	[0046.277] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68dd7f9f0 | out: pbData=0x0*, pdwDataLen=0xe68dd7f9f0*=0x10c) returned 1
	[0046.277] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68dd7fa70, pdwDataLen=0xe68dd7f9f0 | out: pbData=0xe68dd7fa70*, pdwDataLen=0xe68dd7f9f0*=0x10c) returned 1
	[0046.277] WriteFile (in: hFile=0x814, lpBuffer=0xe68dd7fa70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68dd7f9e4, lpOverlapped=0x0 | out: lpBuffer=0xe68dd7fa70*, lpNumberOfBytesWritten=0xe68dd7f9e4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.277] CloseHandle (hObject=0x814) returned 1
	[0046.293] VirtualFree (lpAddress=0x274bd690000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.303] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 168
	os_tid = 0xd24

	[0046.131] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.131] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x818
	[0046.131] GetFileSizeEx (in: hFile=0x818, lpFileSize=0xe68ddffbe8 | out: lpFileSize=0xe68ddffbe8*=4254) returned 1
	[0046.131] GetFileSizeEx (in: hFile=0x818, lpFileSize=0xe68ddffc00 | out: lpFileSize=0xe68ddffc00*=4254) returned 1
	[0046.131] SetFilePointerEx (in: hFile=0x818, liDistanceToMove=0xf7c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.131] ReadFile (in: hFile=0x818, lpBuffer=0xe68ddffc50, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ddffc10, lpOverlapped=0x0 | out: lpBuffer=0xe68ddffc50*, lpNumberOfBytesRead=0xe68ddffc10*=0x19, lpOverlapped=0x0) returned 1
	[0046.186] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.186] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ddffbd0 | out: phKey=0xe68ddffbd0*=0x274ba5c1130) returned 1
	[0046.186] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.186] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.186] ReadFile (in: hFile=0x818, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x109e, lpNumberOfBytesRead=0xe68ddffbe0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68ddffbe0*=0x109e, lpOverlapped=0x0) returned 1
	[0046.211] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ddffbdc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ddffbdc*=0xf4250) returned 1
	[0046.211] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68ddffbd8*=0x109e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68ddffbd8*=0x10a0) returned 1
	[0046.211] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.211] WriteFile (in: hFile=0x818, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0xe68ddffbe0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68ddffbe0*=0x10a0, lpOverlapped=0x0) returned 1
	[0046.212] WriteFile (in: hFile=0x818, lpBuffer=0xe68ddffc18*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ddffbe4, lpOverlapped=0x0 | out: lpBuffer=0xe68ddffc18*, lpNumberOfBytesWritten=0xe68ddffbe4*=0x6, lpOverlapped=0x0) returned 1
	[0046.212] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ddffbf0 | out: pbData=0x0*, pdwDataLen=0xe68ddffbf0*=0x10c) returned 1
	[0046.212] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ddffc70, pdwDataLen=0xe68ddffbf0 | out: pbData=0xe68ddffc70*, pdwDataLen=0xe68ddffbf0*=0x10c) returned 1
	[0046.212] WriteFile (in: hFile=0x818, lpBuffer=0xe68ddffc70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ddffbe4, lpOverlapped=0x0 | out: lpBuffer=0xe68ddffc70*, lpNumberOfBytesWritten=0xe68ddffbe4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.212] CloseHandle (hObject=0x818) returned 1
	[0046.229] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.232] CryptDestroyKey (hKey=0x274ba5c1130) returned 1

Thread:
	id = 169
	os_tid = 0xd60

	[0046.133] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.133] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x81c
	[0046.133] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0xe68de7f6c8 | out: lpFileSize=0xe68de7f6c8*=86442) returned 1
	[0046.133] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0xe68de7f6e0 | out: lpFileSize=0xe68de7f6e0*=86442) returned 1
	[0046.133] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x15088, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.133] ReadFile (in: hFile=0x81c, lpBuffer=0xe68de7f730, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68de7f6f0, lpOverlapped=0x0 | out: lpBuffer=0xe68de7f730*, lpNumberOfBytesRead=0xe68de7f6f0*=0x19, lpOverlapped=0x0) returned 1
	[0046.188] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.188] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68de7f6b0 | out: phKey=0xe68de7f6b0*=0x274ba5c1b40) returned 1
	[0046.188] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd790000
	[0046.189] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.189] ReadFile (in: hFile=0x81c, lpBuffer=0x274bd790000, nNumberOfBytesToRead=0x151aa, lpNumberOfBytesRead=0xe68de7f6c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesRead=0xe68de7f6c0*=0x151aa, lpOverlapped=0x0) returned 1
	[0046.233] CryptEncrypt (in: hKey=0x274ba5c1b40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68de7f6bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68de7f6bc*=0xf4250) returned 1
	[0046.233] CryptEncrypt (in: hKey=0x274ba5c1b40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd790000*, pdwDataLen=0xe68de7f6b8*=0x151aa, dwBufLen=0xf4250 | out: pbData=0x274bd790000*, pdwDataLen=0xe68de7f6b8*=0x151b0) returned 1
	[0046.234] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.234] WriteFile (in: hFile=0x81c, lpBuffer=0x274bd790000*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0xe68de7f6c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesWritten=0xe68de7f6c0*=0x151b0, lpOverlapped=0x0) returned 1
	[0046.234] WriteFile (in: hFile=0x81c, lpBuffer=0xe68de7f6f8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68de7f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe68de7f6f8*, lpNumberOfBytesWritten=0xe68de7f6c4*=0x6, lpOverlapped=0x0) returned 1
	[0046.234] CryptExportKey (in: hKey=0x274ba5c1b40, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68de7f6d0 | out: pbData=0x0*, pdwDataLen=0xe68de7f6d0*=0x10c) returned 1
	[0046.234] CryptExportKey (in: hKey=0x274ba5c1b40, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68de7f750, pdwDataLen=0xe68de7f6d0 | out: pbData=0xe68de7f750*, pdwDataLen=0xe68de7f6d0*=0x10c) returned 1
	[0046.234] WriteFile (in: hFile=0x81c, lpBuffer=0xe68de7f750*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68de7f6c4, lpOverlapped=0x0 | out: lpBuffer=0xe68de7f750*, lpNumberOfBytesWritten=0xe68de7f6c4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.234] CloseHandle (hObject=0x81c) returned 1
	[0046.251] VirtualFree (lpAddress=0x274bd790000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.255] CryptDestroyKey (hKey=0x274ba5c1b40) returned 1

Thread:
	id = 170
	os_tid = 0x7a8

	[0046.134] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.135] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x820
	[0046.135] GetFileSizeEx (in: hFile=0x820, lpFileSize=0xe68deff878 | out: lpFileSize=0xe68deff878*=3643) returned 1
	[0046.135] GetFileSizeEx (in: hFile=0x820, lpFileSize=0xe68deff890 | out: lpFileSize=0xe68deff890*=3643) returned 1
	[0046.135] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0xd19, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.135] ReadFile (in: hFile=0x820, lpBuffer=0xe68deff8e0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68deff8a0, lpOverlapped=0x0 | out: lpBuffer=0xe68deff8e0*, lpNumberOfBytesRead=0xe68deff8a0*=0x19, lpOverlapped=0x0) returned 1
	[0046.190] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.190] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68deff860 | out: phKey=0xe68deff860*=0x274ba5c1280) returned 1
	[0046.190] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd890000
	[0046.190] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.190] ReadFile (in: hFile=0x820, lpBuffer=0x274bd890000, nNumberOfBytesToRead=0xe3b, lpNumberOfBytesRead=0xe68deff870, lpOverlapped=0x0 | out: lpBuffer=0x274bd890000*, lpNumberOfBytesRead=0xe68deff870*=0xe3b, lpOverlapped=0x0) returned 1
	[0046.190] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68deff86c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68deff86c*=0xf4250) returned 1
	[0046.190] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd890000*, pdwDataLen=0xe68deff868*=0xe3b, dwBufLen=0xf4250 | out: pbData=0x274bd890000*, pdwDataLen=0xe68deff868*=0xe40) returned 1
	[0046.190] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.190] WriteFile (in: hFile=0x820, lpBuffer=0x274bd890000*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0xe68deff870, lpOverlapped=0x0 | out: lpBuffer=0x274bd890000*, lpNumberOfBytesWritten=0xe68deff870*=0xe40, lpOverlapped=0x0) returned 1
	[0046.190] WriteFile (in: hFile=0x820, lpBuffer=0xe68deff8a8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68deff874, lpOverlapped=0x0 | out: lpBuffer=0xe68deff8a8*, lpNumberOfBytesWritten=0xe68deff874*=0x6, lpOverlapped=0x0) returned 1
	[0046.191] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68deff880 | out: pbData=0x0*, pdwDataLen=0xe68deff880*=0x10c) returned 1
	[0046.191] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68deff900, pdwDataLen=0xe68deff880 | out: pbData=0xe68deff900*, pdwDataLen=0xe68deff880*=0x10c) returned 1
	[0046.191] WriteFile (in: hFile=0x820, lpBuffer=0xe68deff900*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68deff874, lpOverlapped=0x0 | out: lpBuffer=0xe68deff900*, lpNumberOfBytesWritten=0xe68deff874*=0x10c, lpOverlapped=0x0) returned 1
	[0046.191] CloseHandle (hObject=0x820) returned 1
	[0046.207] VirtualFree (lpAddress=0x274bd890000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.211] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 171
	os_tid = 0x4ac

	[0046.367] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.368] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x80c
	[0046.368] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0xe68df7f688 | out: lpFileSize=0xe68df7f688*=80060) returned 1
	[0046.368] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0xe68df7f6a0 | out: lpFileSize=0xe68df7f6a0*=80060) returned 1
	[0046.368] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x1379a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.368] ReadFile (in: hFile=0x80c, lpBuffer=0xe68df7f6f0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68df7f6b0, lpOverlapped=0x0 | out: lpBuffer=0xe68df7f6f0*, lpNumberOfBytesRead=0xe68df7f6b0*=0x19, lpOverlapped=0x0) returned 1
	[0046.383] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.383] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68df7f670 | out: phKey=0xe68df7f670*=0x274ba5c16e0) returned 1
	[0046.383] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.383] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.383] ReadFile (in: hFile=0x80c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x138bc, lpNumberOfBytesRead=0xe68df7f680, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68df7f680*=0x138bc, lpOverlapped=0x0) returned 1
	[0046.388] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68df7f67c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68df7f67c*=0xf4250) returned 1
	[0046.388] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68df7f678*=0x138bc, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68df7f678*=0x138c0) returned 1
	[0046.388] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.388] WriteFile (in: hFile=0x80c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0xe68df7f680, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68df7f680*=0x138c0, lpOverlapped=0x0) returned 1
	[0046.388] WriteFile (in: hFile=0x80c, lpBuffer=0xe68df7f6b8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68df7f684, lpOverlapped=0x0 | out: lpBuffer=0xe68df7f6b8*, lpNumberOfBytesWritten=0xe68df7f684*=0x6, lpOverlapped=0x0) returned 1
	[0046.388] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68df7f690 | out: pbData=0x0*, pdwDataLen=0xe68df7f690*=0x10c) returned 1
	[0046.388] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68df7f710, pdwDataLen=0xe68df7f690 | out: pbData=0xe68df7f710*, pdwDataLen=0xe68df7f690*=0x10c) returned 1
	[0046.388] WriteFile (in: hFile=0x80c, lpBuffer=0xe68df7f710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68df7f684, lpOverlapped=0x0 | out: lpBuffer=0xe68df7f710*, lpNumberOfBytesWritten=0xe68df7f684*=0x10c, lpOverlapped=0x0) returned 1
	[0046.388] CloseHandle (hObject=0x80c) returned 1
	[0046.408] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.411] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 172
	os_tid = 0xdcc

	[0046.369] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.428] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.433] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68dfffca8 | out: lpFileSize=0xe68dfffca8*=10125) returned 1
	[0046.433] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68dfffcc0 | out: lpFileSize=0xe68dfffcc0*=10125) returned 1
	[0046.433] SetFilePointerEx (in: hFile=0x808, liDistanceToMove=0x266b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.433] ReadFile (in: hFile=0x808, lpBuffer=0xe68dfffd10, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68dfffcd0, lpOverlapped=0x0 | out: lpBuffer=0xe68dfffd10*, lpNumberOfBytesRead=0xe68dfffcd0*=0x19, lpOverlapped=0x0) returned 1
	[0046.443] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.443] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68dfffc90 | out: phKey=0xe68dfffc90*=0x274ba5c1910) returned 1
	[0046.443] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.443] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.443] ReadFile (in: hFile=0x808, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x278d, lpNumberOfBytesRead=0xe68dfffca0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68dfffca0*=0x278d, lpOverlapped=0x0) returned 1
	[0046.444] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68dfffc9c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68dfffc9c*=0xf4250) returned 1
	[0046.444] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68dfffc98*=0x278d, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68dfffc98*=0x2790) returned 1
	[0046.444] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.444] WriteFile (in: hFile=0x808, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0xe68dfffca0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68dfffca0*=0x2790, lpOverlapped=0x0) returned 1
	[0046.444] WriteFile (in: hFile=0x808, lpBuffer=0xe68dfffcd8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68dfffca4, lpOverlapped=0x0 | out: lpBuffer=0xe68dfffcd8*, lpNumberOfBytesWritten=0xe68dfffca4*=0x6, lpOverlapped=0x0) returned 1
	[0046.444] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68dfffcb0 | out: pbData=0x0*, pdwDataLen=0xe68dfffcb0*=0x10c) returned 1
	[0046.444] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68dfffd30, pdwDataLen=0xe68dfffcb0 | out: pbData=0xe68dfffd30*, pdwDataLen=0xe68dfffcb0*=0x10c) returned 1
	[0046.444] WriteFile (in: hFile=0x808, lpBuffer=0xe68dfffd30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68dfffca4, lpOverlapped=0x0 | out: lpBuffer=0xe68dfffd30*, lpNumberOfBytesWritten=0xe68dfffca4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.444] CloseHandle (hObject=0x808) returned 1
	[0046.461] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.465] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 173
	os_tid = 0xe5c

	[0046.369] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.434] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84c
	[0046.434] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xe68e07fb48 | out: lpFileSize=0xe68e07fb48*=68226) returned 1
	[0046.434] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xe68e07fb60 | out: lpFileSize=0xe68e07fb60*=68226) returned 1
	[0046.434] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x10960, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.434] ReadFile (in: hFile=0x84c, lpBuffer=0xe68e07fbb0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e07fb70, lpOverlapped=0x0 | out: lpBuffer=0xe68e07fbb0*, lpNumberOfBytesRead=0xe68e07fb70*=0x19, lpOverlapped=0x0) returned 1
	[0046.465] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.465] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e07fb30 | out: phKey=0xe68e07fb30*=0x274ba5c1910) returned 1
	[0046.465] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.465] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.465] ReadFile (in: hFile=0x84c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x10a82, lpNumberOfBytesRead=0xe68e07fb40, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e07fb40*=0x10a82, lpOverlapped=0x0) returned 1
	[0046.472] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e07fb3c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e07fb3c*=0xf4250) returned 1
	[0046.472] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e07fb38*=0x10a82, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e07fb38*=0x10a90) returned 1
	[0046.472] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.472] WriteFile (in: hFile=0x84c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0xe68e07fb40, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e07fb40*=0x10a90, lpOverlapped=0x0) returned 1
	[0046.472] WriteFile (in: hFile=0x84c, lpBuffer=0xe68e07fb78*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e07fb44, lpOverlapped=0x0 | out: lpBuffer=0xe68e07fb78*, lpNumberOfBytesWritten=0xe68e07fb44*=0x6, lpOverlapped=0x0) returned 1
	[0046.473] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e07fb50 | out: pbData=0x0*, pdwDataLen=0xe68e07fb50*=0x10c) returned 1
	[0046.473] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e07fbd0, pdwDataLen=0xe68e07fb50 | out: pbData=0xe68e07fbd0*, pdwDataLen=0xe68e07fb50*=0x10c) returned 1
	[0046.473] WriteFile (in: hFile=0x84c, lpBuffer=0xe68e07fbd0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e07fb44, lpOverlapped=0x0 | out: lpBuffer=0xe68e07fbd0*, lpNumberOfBytesWritten=0xe68e07fb44*=0x10c, lpOverlapped=0x0) returned 1
	[0046.473] CloseHandle (hObject=0x84c) returned 1
	[0046.490] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.494] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 174
	os_tid = 0xf78

	[0046.551] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.551] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84c
	[0046.552] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xe68e0ff998 | out: lpFileSize=0xe68e0ff998*=12687) returned 1
	[0046.552] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xe68e0ff9b0 | out: lpFileSize=0xe68e0ff9b0*=12687) returned 1
	[0046.552] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0x306d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.552] ReadFile (in: hFile=0x84c, lpBuffer=0xe68e0ffa00, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e0ff9c0, lpOverlapped=0x0 | out: lpBuffer=0xe68e0ffa00*, lpNumberOfBytesRead=0xe68e0ff9c0*=0x19, lpOverlapped=0x0) returned 1
	[0046.582] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.582] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e0ff980 | out: phKey=0xe68e0ff980*=0x274ba5c1910) returned 1
	[0046.582] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.582] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.582] ReadFile (in: hFile=0x84c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x318f, lpNumberOfBytesRead=0xe68e0ff990, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e0ff990*=0x318f, lpOverlapped=0x0) returned 1
	[0046.584] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e0ff98c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e0ff98c*=0xf4250) returned 1
	[0046.584] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e0ff988*=0x318f, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e0ff988*=0x3190) returned 1
	[0046.584] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.584] WriteFile (in: hFile=0x84c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0xe68e0ff990, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e0ff990*=0x3190, lpOverlapped=0x0) returned 1
	[0046.584] WriteFile (in: hFile=0x84c, lpBuffer=0xe68e0ff9c8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e0ff994, lpOverlapped=0x0 | out: lpBuffer=0xe68e0ff9c8*, lpNumberOfBytesWritten=0xe68e0ff994*=0x6, lpOverlapped=0x0) returned 1
	[0046.585] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e0ff9a0 | out: pbData=0x0*, pdwDataLen=0xe68e0ff9a0*=0x10c) returned 1
	[0046.585] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e0ffa20, pdwDataLen=0xe68e0ff9a0 | out: pbData=0xe68e0ffa20*, pdwDataLen=0xe68e0ff9a0*=0x10c) returned 1
	[0046.585] WriteFile (in: hFile=0x84c, lpBuffer=0xe68e0ffa20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e0ff994, lpOverlapped=0x0 | out: lpBuffer=0xe68e0ffa20*, lpNumberOfBytesWritten=0xe68e0ff994*=0x10c, lpOverlapped=0x0) returned 1
	[0046.585] CloseHandle (hObject=0x84c) returned 1
	[0046.601] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.605] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 175
	os_tid = 0xfa8

	[0046.553] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.553] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.553] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68e17f978 | out: lpFileSize=0xe68e17f978*=65238) returned 1
	[0046.553] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68e17f990 | out: lpFileSize=0xe68e17f990*=65238) returned 1
	[0046.553] SetFilePointerEx (in: hFile=0x808, liDistanceToMove=0xfdb4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.553] ReadFile (in: hFile=0x808, lpBuffer=0xe68e17f9e0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e17f9a0, lpOverlapped=0x0 | out: lpBuffer=0xe68e17f9e0*, lpNumberOfBytesRead=0xe68e17f9a0*=0x19, lpOverlapped=0x0) returned 1
	[0046.583] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.583] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e17f960 | out: phKey=0xe68e17f960*=0x274ba5c1980) returned 1
	[0046.583] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0046.583] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.583] ReadFile (in: hFile=0x808, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xfed6, lpNumberOfBytesRead=0xe68e17f970, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68e17f970*=0xfed6, lpOverlapped=0x0) returned 1
	[0046.605] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e17f96c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e17f96c*=0xf4250) returned 1
	[0046.605] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68e17f968*=0xfed6, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68e17f968*=0xfee0) returned 1
	[0046.606] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.606] WriteFile (in: hFile=0x808, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0xe68e17f970, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68e17f970*=0xfee0, lpOverlapped=0x0) returned 1
	[0046.606] WriteFile (in: hFile=0x808, lpBuffer=0xe68e17f9a8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e17f974, lpOverlapped=0x0 | out: lpBuffer=0xe68e17f9a8*, lpNumberOfBytesWritten=0xe68e17f974*=0x6, lpOverlapped=0x0) returned 1
	[0046.606] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e17f980 | out: pbData=0x0*, pdwDataLen=0xe68e17f980*=0x10c) returned 1
	[0046.606] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e17fa00, pdwDataLen=0xe68e17f980 | out: pbData=0xe68e17fa00*, pdwDataLen=0xe68e17f980*=0x10c) returned 1
	[0046.606] WriteFile (in: hFile=0x808, lpBuffer=0xe68e17fa00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e17f974, lpOverlapped=0x0 | out: lpBuffer=0xe68e17fa00*, lpNumberOfBytesWritten=0xe68e17f974*=0x10c, lpOverlapped=0x0) returned 1
	[0046.606] CloseHandle (hObject=0x808) returned 1
	[0046.623] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.628] CryptDestroyKey (hKey=0x274ba5c1980) returned 1

Thread:
	id = 176
	os_tid = 0xf8c

	[0046.555] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.557] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x850
	[0046.558] GetFileSizeEx (in: hFile=0x850, lpFileSize=0xe68e1ffce8 | out: lpFileSize=0xe68e1ffce8*=3546) returned 1
	[0046.558] GetFileSizeEx (in: hFile=0x850, lpFileSize=0xe68e1ffd00 | out: lpFileSize=0xe68e1ffd00*=3546) returned 1
	[0046.558] SetFilePointerEx (in: hFile=0x850, liDistanceToMove=0xcb8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.558] ReadFile (in: hFile=0x850, lpBuffer=0xe68e1ffd50, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e1ffd10, lpOverlapped=0x0 | out: lpBuffer=0xe68e1ffd50*, lpNumberOfBytesRead=0xe68e1ffd10*=0x19, lpOverlapped=0x0) returned 1
	[0046.559] SetFilePointer (in: hFile=0x850, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.559] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e1ffcd0 | out: phKey=0xe68e1ffcd0*=0x274ba5c16e0) returned 1
	[0046.559] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.559] SetFilePointer (in: hFile=0x850, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.559] ReadFile (in: hFile=0x850, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0xe68e1ffce0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e1ffce0*=0xdda, lpOverlapped=0x0) returned 1
	[0046.559] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e1ffcdc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e1ffcdc*=0xf4250) returned 1
	[0046.560] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e1ffcd8*=0xdda, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e1ffcd8*=0xde0) returned 1
	[0046.560] SetFilePointer (in: hFile=0x850, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.560] WriteFile (in: hFile=0x850, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0xe68e1ffce0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e1ffce0*=0xde0, lpOverlapped=0x0) returned 1
	[0046.560] WriteFile (in: hFile=0x850, lpBuffer=0xe68e1ffd18*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e1ffce4, lpOverlapped=0x0 | out: lpBuffer=0xe68e1ffd18*, lpNumberOfBytesWritten=0xe68e1ffce4*=0x6, lpOverlapped=0x0) returned 1
	[0046.560] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e1ffcf0 | out: pbData=0x0*, pdwDataLen=0xe68e1ffcf0*=0x10c) returned 1
	[0046.560] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e1ffd70, pdwDataLen=0xe68e1ffcf0 | out: pbData=0xe68e1ffd70*, pdwDataLen=0xe68e1ffcf0*=0x10c) returned 1
	[0046.560] WriteFile (in: hFile=0x850, lpBuffer=0xe68e1ffd70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e1ffce4, lpOverlapped=0x0 | out: lpBuffer=0xe68e1ffd70*, lpNumberOfBytesWritten=0xe68e1ffce4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.560] CloseHandle (hObject=0x850) returned 1
	[0046.577] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.581] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 177
	os_tid = 0x210

	[0046.558] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.628] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x808
	[0046.628] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68e27f8f8 | out: lpFileSize=0xe68e27f8f8*=79634) returned 1
	[0046.628] GetFileSizeEx (in: hFile=0x808, lpFileSize=0xe68e27f910 | out: lpFileSize=0xe68e27f910*=79634) returned 1
	[0046.628] SetFilePointerEx (in: hFile=0x808, liDistanceToMove=0x135f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.628] ReadFile (in: hFile=0x808, lpBuffer=0xe68e27f960, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e27f920, lpOverlapped=0x0 | out: lpBuffer=0xe68e27f960*, lpNumberOfBytesRead=0xe68e27f920*=0x19, lpOverlapped=0x0) returned 1
	[0046.640] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.640] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e27f8e0 | out: phKey=0xe68e27f8e0*=0x274ba5c1910) returned 1
	[0046.640] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.640] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.640] ReadFile (in: hFile=0x808, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x13712, lpNumberOfBytesRead=0xe68e27f8f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e27f8f0*=0x13712, lpOverlapped=0x0) returned 1
	[0046.721] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e27f8ec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e27f8ec*=0xf4250) returned 1
	[0046.721] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e27f8e8*=0x13712, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e27f8e8*=0x13720) returned 1
	[0046.721] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.721] WriteFile (in: hFile=0x808, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0xe68e27f8f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e27f8f0*=0x13720, lpOverlapped=0x0) returned 1
	[0046.722] WriteFile (in: hFile=0x808, lpBuffer=0xe68e27f928*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e27f8f4, lpOverlapped=0x0 | out: lpBuffer=0xe68e27f928*, lpNumberOfBytesWritten=0xe68e27f8f4*=0x6, lpOverlapped=0x0) returned 1
	[0046.722] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e27f900 | out: pbData=0x0*, pdwDataLen=0xe68e27f900*=0x10c) returned 1
	[0046.722] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e27f980, pdwDataLen=0xe68e27f900 | out: pbData=0xe68e27f980*, pdwDataLen=0xe68e27f900*=0x10c) returned 1
	[0046.722] WriteFile (in: hFile=0x808, lpBuffer=0xe68e27f980*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e27f8f4, lpOverlapped=0x0 | out: lpBuffer=0xe68e27f980*, lpNumberOfBytesWritten=0xe68e27f8f4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.722] CloseHandle (hObject=0x808) returned 1
	[0046.838] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.842] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 178
	os_tid = 0x39c

	[0046.632] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.632] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x84c
	[0046.632] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xe68e2ffa98 | out: lpFileSize=0xe68e2ffa98*=3046) returned 1
	[0046.632] GetFileSizeEx (in: hFile=0x84c, lpFileSize=0xe68e2ffab0 | out: lpFileSize=0xe68e2ffab0*=3046) returned 1
	[0046.632] SetFilePointerEx (in: hFile=0x84c, liDistanceToMove=0xac4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.632] ReadFile (in: hFile=0x84c, lpBuffer=0xe68e2ffb00, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e2ffac0, lpOverlapped=0x0 | out: lpBuffer=0xe68e2ffb00*, lpNumberOfBytesRead=0xe68e2ffac0*=0x19, lpOverlapped=0x0) returned 1
	[0046.671] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.671] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e2ffa80 | out: phKey=0xe68e2ffa80*=0x274ba5c1c20) returned 1
	[0046.671] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0046.671] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.672] ReadFile (in: hFile=0x84c, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xbe6, lpNumberOfBytesRead=0xe68e2ffa90, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68e2ffa90*=0xbe6, lpOverlapped=0x0) returned 1
	[0046.672] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e2ffa8c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e2ffa8c*=0xf4250) returned 1
	[0046.672] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68e2ffa88*=0xbe6, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68e2ffa88*=0xbf0) returned 1
	[0046.672] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.672] WriteFile (in: hFile=0x84c, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0xe68e2ffa90, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68e2ffa90*=0xbf0, lpOverlapped=0x0) returned 1
	[0046.672] WriteFile (in: hFile=0x84c, lpBuffer=0xe68e2ffac8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e2ffa94, lpOverlapped=0x0 | out: lpBuffer=0xe68e2ffac8*, lpNumberOfBytesWritten=0xe68e2ffa94*=0x6, lpOverlapped=0x0) returned 1
	[0046.672] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e2ffaa0 | out: pbData=0x0*, pdwDataLen=0xe68e2ffaa0*=0x10c) returned 1
	[0046.672] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e2ffb20, pdwDataLen=0xe68e2ffaa0 | out: pbData=0xe68e2ffb20*, pdwDataLen=0xe68e2ffaa0*=0x10c) returned 1
	[0046.672] WriteFile (in: hFile=0x84c, lpBuffer=0xe68e2ffb20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e2ffa94, lpOverlapped=0x0 | out: lpBuffer=0xe68e2ffb20*, lpNumberOfBytesWritten=0xe68e2ffa94*=0x10c, lpOverlapped=0x0) returned 1
	[0046.672] CloseHandle (hObject=0x84c) returned 1
	[0046.691] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.696] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 179
	os_tid = 0x344

	[0046.633] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.633] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x850
	[0046.633] GetFileSizeEx (in: hFile=0x850, lpFileSize=0xe68e37fc98 | out: lpFileSize=0xe68e37fc98*=79296) returned 1
	[0046.633] GetFileSizeEx (in: hFile=0x850, lpFileSize=0xe68e37fcb0 | out: lpFileSize=0xe68e37fcb0*=79296) returned 1
	[0046.633] SetFilePointerEx (in: hFile=0x850, liDistanceToMove=0x1349e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.633] ReadFile (in: hFile=0x850, lpBuffer=0xe68e37fd00, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e37fcc0, lpOverlapped=0x0 | out: lpBuffer=0xe68e37fd00*, lpNumberOfBytesRead=0xe68e37fcc0*=0x19, lpOverlapped=0x0) returned 1
	[0046.646] SetFilePointer (in: hFile=0x850, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.646] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e37fc80 | out: phKey=0xe68e37fc80*=0x274ba5c1c20) returned 1
	[0046.646] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0046.647] SetFilePointer (in: hFile=0x850, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.647] ReadFile (in: hFile=0x850, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x135c0, lpNumberOfBytesRead=0xe68e37fc90, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68e37fc90*=0x135c0, lpOverlapped=0x0) returned 1
	[0046.648] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e37fc8c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e37fc8c*=0xf4250) returned 1
	[0046.648] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68e37fc88*=0x135c0, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68e37fc88*=0x135d0) returned 1
	[0046.648] SetFilePointer (in: hFile=0x850, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.648] WriteFile (in: hFile=0x850, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0xe68e37fc90, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68e37fc90*=0x135d0, lpOverlapped=0x0) returned 1
	[0046.649] WriteFile (in: hFile=0x850, lpBuffer=0xe68e37fcc8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e37fc94, lpOverlapped=0x0 | out: lpBuffer=0xe68e37fcc8*, lpNumberOfBytesWritten=0xe68e37fc94*=0x6, lpOverlapped=0x0) returned 1
	[0046.649] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e37fca0 | out: pbData=0x0*, pdwDataLen=0xe68e37fca0*=0x10c) returned 1
	[0046.649] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e37fd20, pdwDataLen=0xe68e37fca0 | out: pbData=0xe68e37fd20*, pdwDataLen=0xe68e37fca0*=0x10c) returned 1
	[0046.649] WriteFile (in: hFile=0x850, lpBuffer=0xe68e37fd20*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e37fc94, lpOverlapped=0x0 | out: lpBuffer=0xe68e37fd20*, lpNumberOfBytesWritten=0xe68e37fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0046.649] CloseHandle (hObject=0x850) returned 1
	[0046.666] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.671] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 180
	os_tid = 0xee8

	[0046.634] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.635] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x848
	[0046.635] GetFileSizeEx (in: hFile=0x848, lpFileSize=0xe68e3ff578 | out: lpFileSize=0xe68e3ff578*=4040) returned 1
	[0046.635] GetFileSizeEx (in: hFile=0x848, lpFileSize=0xe68e3ff590 | out: lpFileSize=0xe68e3ff590*=4040) returned 1
	[0046.635] SetFilePointerEx (in: hFile=0x848, liDistanceToMove=0xea6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.635] ReadFile (in: hFile=0x848, lpBuffer=0xe68e3ff5e0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e3ff5a0, lpOverlapped=0x0 | out: lpBuffer=0xe68e3ff5e0*, lpNumberOfBytesRead=0xe68e3ff5a0*=0x19, lpOverlapped=0x0) returned 1
	[0046.844] SetFilePointer (in: hFile=0x848, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.844] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e3ff560 | out: phKey=0xe68e3ff560*=0x274ba5c0e20) returned 1
	[0046.844] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0046.845] SetFilePointer (in: hFile=0x848, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.845] ReadFile (in: hFile=0x848, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xfc8, lpNumberOfBytesRead=0xe68e3ff570, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68e3ff570*=0xfc8, lpOverlapped=0x0) returned 1
	[0046.845] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e3ff56c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e3ff56c*=0xf4250) returned 1
	[0046.845] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68e3ff568*=0xfc8, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68e3ff568*=0xfd0) returned 1
	[0046.845] SetFilePointer (in: hFile=0x848, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.845] WriteFile (in: hFile=0x848, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0xe68e3ff570, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68e3ff570*=0xfd0, lpOverlapped=0x0) returned 1
	[0046.845] WriteFile (in: hFile=0x848, lpBuffer=0xe68e3ff5a8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e3ff574, lpOverlapped=0x0 | out: lpBuffer=0xe68e3ff5a8*, lpNumberOfBytesWritten=0xe68e3ff574*=0x6, lpOverlapped=0x0) returned 1
	[0046.845] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e3ff580 | out: pbData=0x0*, pdwDataLen=0xe68e3ff580*=0x10c) returned 1
	[0046.845] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e3ff600, pdwDataLen=0xe68e3ff580 | out: pbData=0xe68e3ff600*, pdwDataLen=0xe68e3ff580*=0x10c) returned 1
	[0046.845] WriteFile (in: hFile=0x848, lpBuffer=0xe68e3ff600*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e3ff574, lpOverlapped=0x0 | out: lpBuffer=0xe68e3ff600*, lpNumberOfBytesWritten=0xe68e3ff574*=0x10c, lpOverlapped=0x0) returned 1
	[0046.845] CloseHandle (hObject=0x848) returned 1
	[0046.862] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.866] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 181
	os_tid = 0xd94

	[0046.636] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.636] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x854
	[0046.636] GetFileSizeEx (in: hFile=0x854, lpFileSize=0xe68e47f858 | out: lpFileSize=0xe68e47f858*=82374) returned 1
	[0046.636] GetFileSizeEx (in: hFile=0x854, lpFileSize=0xe68e47f870 | out: lpFileSize=0xe68e47f870*=82374) returned 1
	[0046.636] SetFilePointerEx (in: hFile=0x854, liDistanceToMove=0x140a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.636] ReadFile (in: hFile=0x854, lpBuffer=0xe68e47f8c0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e47f880, lpOverlapped=0x0 | out: lpBuffer=0xe68e47f8c0*, lpNumberOfBytesRead=0xe68e47f880*=0x19, lpOverlapped=0x0) returned 1
	[0046.842] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.843] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e47f840 | out: phKey=0xe68e47f840*=0x274ba5c16e0) returned 1
	[0046.843] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.843] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.843] ReadFile (in: hFile=0x854, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x141c6, lpNumberOfBytesRead=0xe68e47f850, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e47f850*=0x141c6, lpOverlapped=0x0) returned 1
	[0046.914] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e47f84c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e47f84c*=0xf4250) returned 1
	[0046.914] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e47f848*=0x141c6, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e47f848*=0x141d0) returned 1
	[0046.914] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.915] WriteFile (in: hFile=0x854, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0xe68e47f850, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e47f850*=0x141d0, lpOverlapped=0x0) returned 1
	[0046.915] WriteFile (in: hFile=0x854, lpBuffer=0xe68e47f888*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e47f854, lpOverlapped=0x0 | out: lpBuffer=0xe68e47f888*, lpNumberOfBytesWritten=0xe68e47f854*=0x6, lpOverlapped=0x0) returned 1
	[0046.915] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e47f860 | out: pbData=0x0*, pdwDataLen=0xe68e47f860*=0x10c) returned 1
	[0046.915] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e47f8e0, pdwDataLen=0xe68e47f860 | out: pbData=0xe68e47f8e0*, pdwDataLen=0xe68e47f860*=0x10c) returned 1
	[0046.915] WriteFile (in: hFile=0x854, lpBuffer=0xe68e47f8e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e47f854, lpOverlapped=0x0 | out: lpBuffer=0xe68e47f8e0*, lpNumberOfBytesWritten=0xe68e47f854*=0x10c, lpOverlapped=0x0) returned 1
	[0046.915] CloseHandle (hObject=0x854) returned 1
	[0046.931] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.935] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 182
	os_tid = 0x174

	[0046.637] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.637] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x858
	[0046.637] GetFileSizeEx (in: hFile=0x858, lpFileSize=0xe68e4ff778 | out: lpFileSize=0xe68e4ff778*=3683) returned 1
	[0046.637] GetFileSizeEx (in: hFile=0x858, lpFileSize=0xe68e4ff790 | out: lpFileSize=0xe68e4ff790*=3683) returned 1
	[0046.637] SetFilePointerEx (in: hFile=0x858, liDistanceToMove=0xd41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.637] ReadFile (in: hFile=0x858, lpBuffer=0xe68e4ff7e0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e4ff7a0, lpOverlapped=0x0 | out: lpBuffer=0xe68e4ff7e0*, lpNumberOfBytesRead=0xe68e4ff7a0*=0x19, lpOverlapped=0x0) returned 1
	[0046.867] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.867] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e4ff760 | out: phKey=0xe68e4ff760*=0x274ba5c0e20) returned 1
	[0046.867] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0046.867] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.867] ReadFile (in: hFile=0x858, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xe63, lpNumberOfBytesRead=0xe68e4ff770, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68e4ff770*=0xe63, lpOverlapped=0x0) returned 1
	[0046.867] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e4ff76c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e4ff76c*=0xf4250) returned 1
	[0046.867] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68e4ff768*=0xe63, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68e4ff768*=0xe70) returned 1
	[0046.867] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.867] WriteFile (in: hFile=0x858, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0xe68e4ff770, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68e4ff770*=0xe70, lpOverlapped=0x0) returned 1
	[0046.868] WriteFile (in: hFile=0x858, lpBuffer=0xe68e4ff7a8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e4ff774, lpOverlapped=0x0 | out: lpBuffer=0xe68e4ff7a8*, lpNumberOfBytesWritten=0xe68e4ff774*=0x6, lpOverlapped=0x0) returned 1
	[0046.868] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e4ff780 | out: pbData=0x0*, pdwDataLen=0xe68e4ff780*=0x10c) returned 1
	[0046.868] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e4ff800, pdwDataLen=0xe68e4ff780 | out: pbData=0xe68e4ff800*, pdwDataLen=0xe68e4ff780*=0x10c) returned 1
	[0046.868] WriteFile (in: hFile=0x858, lpBuffer=0xe68e4ff800*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e4ff774, lpOverlapped=0x0 | out: lpBuffer=0xe68e4ff800*, lpNumberOfBytesWritten=0xe68e4ff774*=0x10c, lpOverlapped=0x0) returned 1
	[0046.868] CloseHandle (hObject=0x858) returned 1
	[0046.883] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.887] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 183
	os_tid = 0x7a4

	[0046.638] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.638] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x85c
	[0046.638] GetFileSizeEx (in: hFile=0x85c, lpFileSize=0xe68e57f9a8 | out: lpFileSize=0xe68e57f9a8*=80738) returned 1
	[0046.638] GetFileSizeEx (in: hFile=0x85c, lpFileSize=0xe68e57f9c0 | out: lpFileSize=0xe68e57f9c0*=80738) returned 1
	[0046.638] SetFilePointerEx (in: hFile=0x85c, liDistanceToMove=0x13a40, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.638] ReadFile (in: hFile=0x85c, lpBuffer=0xe68e57fa10, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e57f9d0, lpOverlapped=0x0 | out: lpBuffer=0xe68e57fa10*, lpNumberOfBytesRead=0xe68e57f9d0*=0x19, lpOverlapped=0x0) returned 1
	[0046.696] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.696] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e57f990 | out: phKey=0xe68e57f990*=0x274ba5c1c20) returned 1
	[0046.696] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0046.697] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.697] ReadFile (in: hFile=0x85c, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x13b62, lpNumberOfBytesRead=0xe68e57f9a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68e57f9a0*=0x13b62, lpOverlapped=0x0) returned 1
	[0046.891] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e57f99c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e57f99c*=0xf4250) returned 1
	[0046.891] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68e57f998*=0x13b62, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68e57f998*=0x13b70) returned 1
	[0046.891] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.891] WriteFile (in: hFile=0x85c, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0xe68e57f9a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68e57f9a0*=0x13b70, lpOverlapped=0x0) returned 1
	[0046.892] WriteFile (in: hFile=0x85c, lpBuffer=0xe68e57f9d8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e57f9a4, lpOverlapped=0x0 | out: lpBuffer=0xe68e57f9d8*, lpNumberOfBytesWritten=0xe68e57f9a4*=0x6, lpOverlapped=0x0) returned 1
	[0046.892] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e57f9b0 | out: pbData=0x0*, pdwDataLen=0xe68e57f9b0*=0x10c) returned 1
	[0046.892] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e57fa30, pdwDataLen=0xe68e57f9b0 | out: pbData=0xe68e57fa30*, pdwDataLen=0xe68e57f9b0*=0x10c) returned 1
	[0046.892] WriteFile (in: hFile=0x85c, lpBuffer=0xe68e57fa30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e57f9a4, lpOverlapped=0x0 | out: lpBuffer=0xe68e57fa30*, lpNumberOfBytesWritten=0xe68e57f9a4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.892] CloseHandle (hObject=0x85c) returned 1
	[0046.909] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.913] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 184
	os_tid = 0x26c

	[0046.639] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.642] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0046.642] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e5ff8e8 | out: lpFileSize=0xe68e5ff8e8*=54456) returned 1
	[0046.642] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e5ff900 | out: lpFileSize=0xe68e5ff900*=54456) returned 1
	[0046.642] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0xd396, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.642] ReadFile (in: hFile=0x860, lpBuffer=0xe68e5ff950, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e5ff910, lpOverlapped=0x0 | out: lpBuffer=0xe68e5ff950*, lpNumberOfBytesRead=0xe68e5ff910*=0x19, lpOverlapped=0x0) returned 1
	[0046.890] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.890] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e5ff8d0 | out: phKey=0xe68e5ff8d0*=0x274ba5c1910) returned 1
	[0046.890] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd590000
	[0046.890] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.890] ReadFile (in: hFile=0x860, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xd4b8, lpNumberOfBytesRead=0xe68e5ff8e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68e5ff8e0*=0xd4b8, lpOverlapped=0x0) returned 1
	[0046.957] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e5ff8dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e5ff8dc*=0xf4250) returned 1
	[0046.957] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68e5ff8d8*=0xd4b8, dwBufLen=0xf4250 | out: pbData=0x274bd590000*, pdwDataLen=0xe68e5ff8d8*=0xd4c0) returned 1
	[0046.957] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.957] WriteFile (in: hFile=0x860, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0xe68e5ff8e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68e5ff8e0*=0xd4c0, lpOverlapped=0x0) returned 1
	[0046.957] WriteFile (in: hFile=0x860, lpBuffer=0xe68e5ff918*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e5ff8e4, lpOverlapped=0x0 | out: lpBuffer=0xe68e5ff918*, lpNumberOfBytesWritten=0xe68e5ff8e4*=0x6, lpOverlapped=0x0) returned 1
	[0046.957] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e5ff8f0 | out: pbData=0x0*, pdwDataLen=0xe68e5ff8f0*=0x10c) returned 1
	[0046.957] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e5ff970, pdwDataLen=0xe68e5ff8f0 | out: pbData=0xe68e5ff970*, pdwDataLen=0xe68e5ff8f0*=0x10c) returned 1
	[0046.957] WriteFile (in: hFile=0x860, lpBuffer=0xe68e5ff970*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e5ff8e4, lpOverlapped=0x0 | out: lpBuffer=0xe68e5ff970*, lpNumberOfBytesWritten=0xe68e5ff8e4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.957] CloseHandle (hObject=0x860) returned 1
	[0046.973] VirtualFree (lpAddress=0x274bd590000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.977] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 185
	os_tid = 0xd84

	[0046.643] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.643] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x86c
	[0046.643] GetFileSizeEx (in: hFile=0x86c, lpFileSize=0xe68e67f798 | out: lpFileSize=0xe68e67f798*=81482) returned 1
	[0046.643] GetFileSizeEx (in: hFile=0x86c, lpFileSize=0xe68e67f7b0 | out: lpFileSize=0xe68e67f7b0*=81482) returned 1
	[0046.643] SetFilePointerEx (in: hFile=0x86c, liDistanceToMove=0x13d28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.643] ReadFile (in: hFile=0x86c, lpBuffer=0xe68e67f800, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e67f7c0, lpOverlapped=0x0 | out: lpBuffer=0xe68e67f800*, lpNumberOfBytesRead=0xe68e67f7c0*=0x19, lpOverlapped=0x0) returned 1
	[0046.888] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.888] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e67f780 | out: phKey=0xe68e67f780*=0x274ba5c0e20) returned 1
	[0046.888] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0046.888] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.888] ReadFile (in: hFile=0x86c, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x13e4a, lpNumberOfBytesRead=0xe68e67f790, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68e67f790*=0x13e4a, lpOverlapped=0x0) returned 1
	[0046.936] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e67f78c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e67f78c*=0xf4250) returned 1
	[0046.936] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68e67f788*=0x13e4a, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68e67f788*=0x13e50) returned 1
	[0046.936] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.936] WriteFile (in: hFile=0x86c, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0xe68e67f790, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68e67f790*=0x13e50, lpOverlapped=0x0) returned 1
	[0046.936] WriteFile (in: hFile=0x86c, lpBuffer=0xe68e67f7c8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e67f794, lpOverlapped=0x0 | out: lpBuffer=0xe68e67f7c8*, lpNumberOfBytesWritten=0xe68e67f794*=0x6, lpOverlapped=0x0) returned 1
	[0046.936] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e67f7a0 | out: pbData=0x0*, pdwDataLen=0xe68e67f7a0*=0x10c) returned 1
	[0046.936] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e67f820, pdwDataLen=0xe68e67f7a0 | out: pbData=0xe68e67f820*, pdwDataLen=0xe68e67f7a0*=0x10c) returned 1
	[0046.936] WriteFile (in: hFile=0x86c, lpBuffer=0xe68e67f820*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e67f794, lpOverlapped=0x0 | out: lpBuffer=0xe68e67f820*, lpNumberOfBytesWritten=0xe68e67f794*=0x10c, lpOverlapped=0x0) returned 1
	[0046.936] CloseHandle (hObject=0x86c) returned 1
	[0046.952] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.956] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 186
	os_tid = 0xd54

	[0046.644] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0046.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x870
	[0046.645] GetFileSizeEx (in: hFile=0x870, lpFileSize=0xe68e6ffcb8 | out: lpFileSize=0xe68e6ffcb8*=3865) returned 1
	[0046.645] GetFileSizeEx (in: hFile=0x870, lpFileSize=0xe68e6ffcd0 | out: lpFileSize=0xe68e6ffcd0*=3865) returned 1
	[0046.645] SetFilePointerEx (in: hFile=0x870, liDistanceToMove=0xdf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.645] ReadFile (in: hFile=0x870, lpBuffer=0xe68e6ffd20, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e6ffce0, lpOverlapped=0x0 | out: lpBuffer=0xe68e6ffd20*, lpNumberOfBytesRead=0xe68e6ffce0*=0x19, lpOverlapped=0x0) returned 1
	[0046.698] SetFilePointer (in: hFile=0x870, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.698] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e6ffca0 | out: phKey=0xe68e6ffca0*=0x274ba5c16e0) returned 1
	[0046.698] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0046.698] SetFilePointer (in: hFile=0x870, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.698] ReadFile (in: hFile=0x870, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xf19, lpNumberOfBytesRead=0xe68e6ffcb0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68e6ffcb0*=0xf19, lpOverlapped=0x0) returned 1
	[0046.699] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e6ffcac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e6ffcac*=0xf4250) returned 1
	[0046.699] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68e6ffca8*=0xf19, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68e6ffca8*=0xf20) returned 1
	[0046.699] SetFilePointer (in: hFile=0x870, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.699] WriteFile (in: hFile=0x870, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0xe68e6ffcb0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68e6ffcb0*=0xf20, lpOverlapped=0x0) returned 1
	[0046.699] WriteFile (in: hFile=0x870, lpBuffer=0xe68e6ffce8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e6ffcb4, lpOverlapped=0x0 | out: lpBuffer=0xe68e6ffce8*, lpNumberOfBytesWritten=0xe68e6ffcb4*=0x6, lpOverlapped=0x0) returned 1
	[0046.699] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e6ffcc0 | out: pbData=0x0*, pdwDataLen=0xe68e6ffcc0*=0x10c) returned 1
	[0046.699] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e6ffd40, pdwDataLen=0xe68e6ffcc0 | out: pbData=0xe68e6ffd40*, pdwDataLen=0xe68e6ffcc0*=0x10c) returned 1
	[0046.699] WriteFile (in: hFile=0x870, lpBuffer=0xe68e6ffd40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e6ffcb4, lpOverlapped=0x0 | out: lpBuffer=0xe68e6ffd40*, lpNumberOfBytesWritten=0xe68e6ffcb4*=0x10c, lpOverlapped=0x0) returned 1
	[0046.699] CloseHandle (hObject=0x870) returned 1
	[0046.716] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0046.721] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 187
	os_tid = 0xed4

	[0046.646] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0046.648] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0046.978] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e77fa58 | out: lpFileSize=0xe68e77fa58*=77680) returned 1
	[0046.978] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e77fa70 | out: lpFileSize=0xe68e77fa70*=77680) returned 1
	[0046.978] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x12e4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0046.978] ReadFile (in: hFile=0x860, lpBuffer=0xe68e77fac0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e77fa80, lpOverlapped=0x0 | out: lpBuffer=0xe68e77fac0*, lpNumberOfBytesRead=0xe68e77fa80*=0x19, lpOverlapped=0x0) returned 1
	[0046.980] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.980] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e77fa40 | out: phKey=0xe68e77fa40*=0x274ba5c1910) returned 1
	[0046.980] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0046.980] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.980] ReadFile (in: hFile=0x860, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x12f70, lpNumberOfBytesRead=0xe68e77fa50, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e77fa50*=0x12f70, lpOverlapped=0x0) returned 1
	[0046.982] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e77fa4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e77fa4c*=0xf4250) returned 1
	[0046.982] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e77fa48*=0x12f70, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e77fa48*=0x12f80) returned 1
	[0046.982] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0046.982] WriteFile (in: hFile=0x860, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0xe68e77fa50, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e77fa50*=0x12f80, lpOverlapped=0x0) returned 1
	[0046.982] WriteFile (in: hFile=0x860, lpBuffer=0xe68e77fa88*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e77fa54, lpOverlapped=0x0 | out: lpBuffer=0xe68e77fa88*, lpNumberOfBytesWritten=0xe68e77fa54*=0x6, lpOverlapped=0x0) returned 1
	[0046.982] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e77fa60 | out: pbData=0x0*, pdwDataLen=0xe68e77fa60*=0x10c) returned 1
	[0046.982] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e77fae0, pdwDataLen=0xe68e77fa60 | out: pbData=0xe68e77fae0*, pdwDataLen=0xe68e77fa60*=0x10c) returned 1
	[0046.982] WriteFile (in: hFile=0x860, lpBuffer=0xe68e77fae0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e77fa54, lpOverlapped=0x0 | out: lpBuffer=0xe68e77fae0*, lpNumberOfBytesWritten=0xe68e77fa54*=0x10c, lpOverlapped=0x0) returned 1
	[0046.983] CloseHandle (hObject=0x860) returned 1
	[0047.009] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.013] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 188
	os_tid = 0x1b4

	[0046.981] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0047.023] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0047.023] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e7ff688 | out: lpFileSize=0xe68e7ff688*=3859) returned 1
	[0047.023] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e7ff6a0 | out: lpFileSize=0xe68e7ff6a0*=3859) returned 1
	[0047.023] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0xdf1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.023] ReadFile (in: hFile=0x860, lpBuffer=0xe68e7ff6f0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e7ff6b0, lpOverlapped=0x0 | out: lpBuffer=0xe68e7ff6f0*, lpNumberOfBytesRead=0xe68e7ff6b0*=0x19, lpOverlapped=0x0) returned 1
	[0047.033] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.033] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e7ff670 | out: phKey=0xe68e7ff670*=0x274ba5c1c20) returned 1
	[0047.033] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.033] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.033] ReadFile (in: hFile=0x860, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xf13, lpNumberOfBytesRead=0xe68e7ff680, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e7ff680*=0xf13, lpOverlapped=0x0) returned 1
	[0047.034] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e7ff67c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e7ff67c*=0xf4250) returned 1
	[0047.034] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e7ff678*=0xf13, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e7ff678*=0xf20) returned 1
	[0047.034] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.034] WriteFile (in: hFile=0x860, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0xe68e7ff680, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e7ff680*=0xf20, lpOverlapped=0x0) returned 1
	[0047.034] WriteFile (in: hFile=0x860, lpBuffer=0xe68e7ff6b8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e7ff684, lpOverlapped=0x0 | out: lpBuffer=0xe68e7ff6b8*, lpNumberOfBytesWritten=0xe68e7ff684*=0x6, lpOverlapped=0x0) returned 1
	[0047.034] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e7ff690 | out: pbData=0x0*, pdwDataLen=0xe68e7ff690*=0x10c) returned 1
	[0047.034] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e7ff710, pdwDataLen=0xe68e7ff690 | out: pbData=0xe68e7ff710*, pdwDataLen=0xe68e7ff690*=0x10c) returned 1
	[0047.034] WriteFile (in: hFile=0x860, lpBuffer=0xe68e7ff710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e7ff684, lpOverlapped=0x0 | out: lpBuffer=0xe68e7ff710*, lpNumberOfBytesWritten=0xe68e7ff684*=0x10c, lpOverlapped=0x0) returned 1
	[0047.034] CloseHandle (hObject=0x860) returned 1
	[0047.051] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.055] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 189
	os_tid = 0xe88

	[0047.014] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0047.077] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x860
	[0047.077] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e87fa58 | out: lpFileSize=0xe68e87fa58*=76818) returned 1
	[0047.077] GetFileSizeEx (in: hFile=0x860, lpFileSize=0xe68e87fa70 | out: lpFileSize=0xe68e87fa70*=76818) returned 1
	[0047.077] SetFilePointerEx (in: hFile=0x860, liDistanceToMove=0x12af0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.077] ReadFile (in: hFile=0x860, lpBuffer=0xe68e87fac0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e87fa80, lpOverlapped=0x0 | out: lpBuffer=0xe68e87fac0*, lpNumberOfBytesRead=0xe68e87fa80*=0x19, lpOverlapped=0x0) returned 1
	[0047.078] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.078] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e87fa40 | out: phKey=0xe68e87fa40*=0x274ba5c1c20) returned 1
	[0047.078] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.078] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.079] ReadFile (in: hFile=0x860, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x12c12, lpNumberOfBytesRead=0xe68e87fa50, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e87fa50*=0x12c12, lpOverlapped=0x0) returned 1
	[0047.080] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e87fa4c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e87fa4c*=0xf4250) returned 1
	[0047.080] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e87fa48*=0x12c12, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e87fa48*=0x12c20) returned 1
	[0047.080] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.080] WriteFile (in: hFile=0x860, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0xe68e87fa50, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e87fa50*=0x12c20, lpOverlapped=0x0) returned 1
	[0047.081] WriteFile (in: hFile=0x860, lpBuffer=0xe68e87fa88*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e87fa54, lpOverlapped=0x0 | out: lpBuffer=0xe68e87fa88*, lpNumberOfBytesWritten=0xe68e87fa54*=0x6, lpOverlapped=0x0) returned 1
	[0047.081] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e87fa60 | out: pbData=0x0*, pdwDataLen=0xe68e87fa60*=0x10c) returned 1
	[0047.081] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e87fae0, pdwDataLen=0xe68e87fa60 | out: pbData=0xe68e87fae0*, pdwDataLen=0xe68e87fa60*=0x10c) returned 1
	[0047.081] WriteFile (in: hFile=0x860, lpBuffer=0xe68e87fae0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e87fa54, lpOverlapped=0x0 | out: lpBuffer=0xe68e87fae0*, lpNumberOfBytesWritten=0xe68e87fa54*=0x10c, lpOverlapped=0x0) returned 1
	[0047.081] CloseHandle (hObject=0x860) returned 1
	[0047.098] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.102] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 191
	os_tid = 0x714

	[0047.161] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0047.176] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b8
	[0047.176] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0xe68e8ff8e8 | out: lpFileSize=0xe68e8ff8e8*=5827) returned 1
	[0047.176] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0xe68e8ff900 | out: lpFileSize=0xe68e8ff900*=5827) returned 1
	[0047.176] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x15a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.176] ReadFile (in: hFile=0x8b8, lpBuffer=0xe68e8ff950, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e8ff910, lpOverlapped=0x0 | out: lpBuffer=0xe68e8ff950*, lpNumberOfBytesRead=0xe68e8ff910*=0x19, lpOverlapped=0x0) returned 1
	[0047.182] SetFilePointer (in: hFile=0x8b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.182] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e8ff8d0 | out: phKey=0xe68e8ff8d0*=0x274ba5c1130) returned 1
	[0047.182] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0047.182] SetFilePointer (in: hFile=0x8b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.182] ReadFile (in: hFile=0x8b8, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x16c3, lpNumberOfBytesRead=0xe68e8ff8e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68e8ff8e0*=0x16c3, lpOverlapped=0x0) returned 1
	[0047.183] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e8ff8dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e8ff8dc*=0xf4250) returned 1
	[0047.184] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68e8ff8d8*=0x16c3, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68e8ff8d8*=0x16d0) returned 1
	[0047.184] SetFilePointer (in: hFile=0x8b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.184] WriteFile (in: hFile=0x8b8, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0xe68e8ff8e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68e8ff8e0*=0x16d0, lpOverlapped=0x0) returned 1
	[0047.184] WriteFile (in: hFile=0x8b8, lpBuffer=0xe68e8ff918*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e8ff8e4, lpOverlapped=0x0 | out: lpBuffer=0xe68e8ff918*, lpNumberOfBytesWritten=0xe68e8ff8e4*=0x6, lpOverlapped=0x0) returned 1
	[0047.184] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e8ff8f0 | out: pbData=0x0*, pdwDataLen=0xe68e8ff8f0*=0x10c) returned 1
	[0047.184] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e8ff970, pdwDataLen=0xe68e8ff8f0 | out: pbData=0xe68e8ff970*, pdwDataLen=0xe68e8ff8f0*=0x10c) returned 1
	[0047.184] WriteFile (in: hFile=0x8b8, lpBuffer=0xe68e8ff970*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e8ff8e4, lpOverlapped=0x0 | out: lpBuffer=0xe68e8ff970*, lpNumberOfBytesWritten=0xe68e8ff8e4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.184] CloseHandle (hObject=0x8b8) returned 1
	[0047.200] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.204] CryptDestroyKey (hKey=0x274ba5c1130) returned 1

Thread:
	id = 192
	os_tid = 0x910

	[0047.164] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0047.164] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0047.164] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0xe68e97f708 | out: lpFileSize=0xe68e97f708*=60684) returned 1
	[0047.164] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0xe68e97f720 | out: lpFileSize=0xe68e97f720*=60684) returned 1
	[0047.164] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0xebea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.164] ReadFile (in: hFile=0x8a4, lpBuffer=0xe68e97f770, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e97f730, lpOverlapped=0x0 | out: lpBuffer=0xe68e97f770*, lpNumberOfBytesRead=0xe68e97f730*=0x19, lpOverlapped=0x0) returned 1
	[0047.177] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.177] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e97f6f0 | out: phKey=0xe68e97f6f0*=0x274ba5c1280) returned 1
	[0047.177] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.177] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.177] ReadFile (in: hFile=0x8a4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xed0c, lpNumberOfBytesRead=0xe68e97f700, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68e97f700*=0xed0c, lpOverlapped=0x0) returned 1
	[0047.269] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e97f6fc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e97f6fc*=0xf4250) returned 1
	[0047.269] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68e97f6f8*=0xed0c, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68e97f6f8*=0xed10) returned 1
	[0047.269] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.269] WriteFile (in: hFile=0x8a4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0xe68e97f700, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68e97f700*=0xed10, lpOverlapped=0x0) returned 1
	[0047.269] WriteFile (in: hFile=0x8a4, lpBuffer=0xe68e97f738*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e97f704, lpOverlapped=0x0 | out: lpBuffer=0xe68e97f738*, lpNumberOfBytesWritten=0xe68e97f704*=0x6, lpOverlapped=0x0) returned 1
	[0047.269] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e97f710 | out: pbData=0x0*, pdwDataLen=0xe68e97f710*=0x10c) returned 1
	[0047.269] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e97f790, pdwDataLen=0xe68e97f710 | out: pbData=0xe68e97f790*, pdwDataLen=0xe68e97f710*=0x10c) returned 1
	[0047.269] WriteFile (in: hFile=0x8a4, lpBuffer=0xe68e97f790*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e97f704, lpOverlapped=0x0 | out: lpBuffer=0xe68e97f790*, lpNumberOfBytesWritten=0xe68e97f704*=0x10c, lpOverlapped=0x0) returned 1
	[0047.269] CloseHandle (hObject=0x8a4) returned 1
	[0047.285] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.289] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 193
	os_tid = 0xd78

	[0047.165] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0047.166] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a8
	[0047.166] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0xe68e9ff638 | out: lpFileSize=0xe68e9ff638*=4015) returned 1
	[0047.166] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0xe68e9ff650 | out: lpFileSize=0xe68e9ff650*=4015) returned 1
	[0047.166] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0xe8d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.166] ReadFile (in: hFile=0x8a8, lpBuffer=0xe68e9ff6a0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68e9ff660, lpOverlapped=0x0 | out: lpBuffer=0xe68e9ff6a0*, lpNumberOfBytesRead=0xe68e9ff660*=0x19, lpOverlapped=0x0) returned 1
	[0047.226] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.226] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68e9ff620 | out: phKey=0xe68e9ff620*=0x274ba5c16e0) returned 1
	[0047.226] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.226] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.226] ReadFile (in: hFile=0x8a8, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xfaf, lpNumberOfBytesRead=0xe68e9ff630, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68e9ff630*=0xfaf, lpOverlapped=0x0) returned 1
	[0047.226] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68e9ff62c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68e9ff62c*=0xf4250) returned 1
	[0047.226] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68e9ff628*=0xfaf, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68e9ff628*=0xfb0) returned 1
	[0047.226] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.227] WriteFile (in: hFile=0x8a8, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0xe68e9ff630, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68e9ff630*=0xfb0, lpOverlapped=0x0) returned 1
	[0047.227] WriteFile (in: hFile=0x8a8, lpBuffer=0xe68e9ff668*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68e9ff634, lpOverlapped=0x0 | out: lpBuffer=0xe68e9ff668*, lpNumberOfBytesWritten=0xe68e9ff634*=0x6, lpOverlapped=0x0) returned 1
	[0047.227] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68e9ff640 | out: pbData=0x0*, pdwDataLen=0xe68e9ff640*=0x10c) returned 1
	[0047.227] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68e9ff6c0, pdwDataLen=0xe68e9ff640 | out: pbData=0xe68e9ff6c0*, pdwDataLen=0xe68e9ff640*=0x10c) returned 1
	[0047.227] WriteFile (in: hFile=0x8a8, lpBuffer=0xe68e9ff6c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68e9ff634, lpOverlapped=0x0 | out: lpBuffer=0xe68e9ff6c0*, lpNumberOfBytesWritten=0xe68e9ff634*=0x10c, lpOverlapped=0x0) returned 1
	[0047.227] CloseHandle (hObject=0x8a8) returned 1
	[0047.243] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.247] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 194
	os_tid = 0xeac

	[0047.167] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0047.167] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8ac
	[0047.167] GetFileSizeEx (in: hFile=0x8ac, lpFileSize=0xe68ea7f748 | out: lpFileSize=0xe68ea7f748*=80254) returned 1
	[0047.167] GetFileSizeEx (in: hFile=0x8ac, lpFileSize=0xe68ea7f760 | out: lpFileSize=0xe68ea7f760*=80254) returned 1
	[0047.167] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x1385c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.167] ReadFile (in: hFile=0x8ac, lpBuffer=0xe68ea7f7b0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ea7f770, lpOverlapped=0x0 | out: lpBuffer=0xe68ea7f7b0*, lpNumberOfBytesRead=0xe68ea7f770*=0x19, lpOverlapped=0x0) returned 1
	[0047.292] SetFilePointer (in: hFile=0x8ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.293] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ea7f730 | out: phKey=0xe68ea7f730*=0x274ba5c1210) returned 1
	[0047.293] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0047.293] SetFilePointer (in: hFile=0x8ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.293] ReadFile (in: hFile=0x8ac, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x1397e, lpNumberOfBytesRead=0xe68ea7f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68ea7f740*=0x1397e, lpOverlapped=0x0) returned 1
	[0047.326] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ea7f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ea7f73c*=0xf4250) returned 1
	[0047.326] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68ea7f738*=0x1397e, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68ea7f738*=0x13980) returned 1
	[0047.326] SetFilePointer (in: hFile=0x8ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.326] WriteFile (in: hFile=0x8ac, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0xe68ea7f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68ea7f740*=0x13980, lpOverlapped=0x0) returned 1
	[0047.326] WriteFile (in: hFile=0x8ac, lpBuffer=0xe68ea7f778*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ea7f744, lpOverlapped=0x0 | out: lpBuffer=0xe68ea7f778*, lpNumberOfBytesWritten=0xe68ea7f744*=0x6, lpOverlapped=0x0) returned 1
	[0047.326] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ea7f750 | out: pbData=0x0*, pdwDataLen=0xe68ea7f750*=0x10c) returned 1
	[0047.326] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ea7f7d0, pdwDataLen=0xe68ea7f750 | out: pbData=0xe68ea7f7d0*, pdwDataLen=0xe68ea7f750*=0x10c) returned 1
	[0047.326] WriteFile (in: hFile=0x8ac, lpBuffer=0xe68ea7f7d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ea7f744, lpOverlapped=0x0 | out: lpBuffer=0xe68ea7f7d0*, lpNumberOfBytesWritten=0xe68ea7f744*=0x10c, lpOverlapped=0x0) returned 1
	[0047.326] CloseHandle (hObject=0x8ac) returned 1
	[0047.344] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.348] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 195
	os_tid = 0x3a8

	[0047.169] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0047.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b0
	[0047.169] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0xe68eaff7d8 | out: lpFileSize=0xe68eaff7d8*=6309) returned 1
	[0047.169] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0xe68eaff7f0 | out: lpFileSize=0xe68eaff7f0*=6309) returned 1
	[0047.169] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x1783, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.169] ReadFile (in: hFile=0x8b0, lpBuffer=0xe68eaff840, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68eaff800, lpOverlapped=0x0 | out: lpBuffer=0xe68eaff840*, lpNumberOfBytesRead=0xe68eaff800*=0x19, lpOverlapped=0x0) returned 1
	[0047.181] SetFilePointer (in: hFile=0x8b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.181] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68eaff7c0 | out: phKey=0xe68eaff7c0*=0x274ba5c16e0) returned 1
	[0047.181] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.181] SetFilePointer (in: hFile=0x8b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.181] ReadFile (in: hFile=0x8b0, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0xe68eaff7d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68eaff7d0*=0x18a5, lpOverlapped=0x0) returned 1
	[0047.205] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68eaff7cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68eaff7cc*=0xf4250) returned 1
	[0047.205] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68eaff7c8*=0x18a5, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68eaff7c8*=0x18b0) returned 1
	[0047.205] SetFilePointer (in: hFile=0x8b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.205] WriteFile (in: hFile=0x8b0, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0xe68eaff7d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68eaff7d0*=0x18b0, lpOverlapped=0x0) returned 1
	[0047.205] WriteFile (in: hFile=0x8b0, lpBuffer=0xe68eaff808*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68eaff7d4, lpOverlapped=0x0 | out: lpBuffer=0xe68eaff808*, lpNumberOfBytesWritten=0xe68eaff7d4*=0x6, lpOverlapped=0x0) returned 1
	[0047.205] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68eaff7e0 | out: pbData=0x0*, pdwDataLen=0xe68eaff7e0*=0x10c) returned 1
	[0047.205] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68eaff860, pdwDataLen=0xe68eaff7e0 | out: pbData=0xe68eaff860*, pdwDataLen=0xe68eaff7e0*=0x10c) returned 1
	[0047.205] WriteFile (in: hFile=0x8b0, lpBuffer=0xe68eaff860*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68eaff7d4, lpOverlapped=0x0 | out: lpBuffer=0xe68eaff860*, lpNumberOfBytesWritten=0xe68eaff7d4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.205] CloseHandle (hObject=0x8b0) returned 1
	[0047.222] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.225] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 196
	os_tid = 0xeb4

	[0047.170] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0047.170] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0047.170] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68eb7f818 | out: lpFileSize=0xe68eb7f818*=60816) returned 1
	[0047.170] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68eb7f830 | out: lpFileSize=0xe68eb7f830*=60816) returned 1
	[0047.170] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0xec6e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.170] ReadFile (in: hFile=0x8b4, lpBuffer=0xe68eb7f880, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68eb7f840, lpOverlapped=0x0 | out: lpBuffer=0xe68eb7f880*, lpNumberOfBytesRead=0xe68eb7f840*=0x19, lpOverlapped=0x0) returned 1
	[0047.289] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.289] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68eb7f800 | out: phKey=0xe68eb7f800*=0x274ba5c1130) returned 1
	[0047.289] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.290] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.290] ReadFile (in: hFile=0x8b4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xed90, lpNumberOfBytesRead=0xe68eb7f810, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68eb7f810*=0xed90, lpOverlapped=0x0) returned 1
	[0047.294] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68eb7f80c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68eb7f80c*=0xf4250) returned 1
	[0047.294] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68eb7f808*=0xed90, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68eb7f808*=0xeda0) returned 1
	[0047.294] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.294] WriteFile (in: hFile=0x8b4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0xe68eb7f810, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68eb7f810*=0xeda0, lpOverlapped=0x0) returned 1
	[0047.295] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68eb7f848*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68eb7f814, lpOverlapped=0x0 | out: lpBuffer=0xe68eb7f848*, lpNumberOfBytesWritten=0xe68eb7f814*=0x6, lpOverlapped=0x0) returned 1
	[0047.295] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68eb7f820 | out: pbData=0x0*, pdwDataLen=0xe68eb7f820*=0x10c) returned 1
	[0047.295] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68eb7f8a0, pdwDataLen=0xe68eb7f820 | out: pbData=0xe68eb7f8a0*, pdwDataLen=0xe68eb7f820*=0x10c) returned 1
	[0047.295] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68eb7f8a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68eb7f814, lpOverlapped=0x0 | out: lpBuffer=0xe68eb7f8a0*, lpNumberOfBytesWritten=0xe68eb7f814*=0x10c, lpOverlapped=0x0) returned 1
	[0047.295] CloseHandle (hObject=0x8b4) returned 1
	[0047.321] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.325] CryptDestroyKey (hKey=0x274ba5c1130) returned 1

Thread:
	id = 197
	os_tid = 0xf04

	[0047.179] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", dwFileAttributes=0x80) returned 1
	[0047.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8bc
	[0047.179] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0xe68ebff7b8 | out: lpFileSize=0xe68ebff7b8*=3069) returned 1
	[0047.179] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0xe68ebff7d0 | out: lpFileSize=0xe68ebff7d0*=3069) returned 1
	[0047.179] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0xadb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.179] ReadFile (in: hFile=0x8bc, lpBuffer=0xe68ebff820, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ebff7e0, lpOverlapped=0x0 | out: lpBuffer=0xe68ebff820*, lpNumberOfBytesRead=0xe68ebff7e0*=0x19, lpOverlapped=0x0) returned 1
	[0047.247] SetFilePointer (in: hFile=0x8bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.247] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ebff7a0 | out: phKey=0xe68ebff7a0*=0x274ba5c1130) returned 1
	[0047.247] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.247] SetFilePointer (in: hFile=0x8bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.248] ReadFile (in: hFile=0x8bc, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xbfd, lpNumberOfBytesRead=0xe68ebff7b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68ebff7b0*=0xbfd, lpOverlapped=0x0) returned 1
	[0047.248] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ebff7ac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ebff7ac*=0xf4250) returned 1
	[0047.248] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68ebff7a8*=0xbfd, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68ebff7a8*=0xc00) returned 1
	[0047.248] SetFilePointer (in: hFile=0x8bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.248] WriteFile (in: hFile=0x8bc, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0xe68ebff7b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68ebff7b0*=0xc00, lpOverlapped=0x0) returned 1
	[0047.248] WriteFile (in: hFile=0x8bc, lpBuffer=0xe68ebff7e8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ebff7b4, lpOverlapped=0x0 | out: lpBuffer=0xe68ebff7e8*, lpNumberOfBytesWritten=0xe68ebff7b4*=0x6, lpOverlapped=0x0) returned 1
	[0047.248] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ebff7c0 | out: pbData=0x0*, pdwDataLen=0xe68ebff7c0*=0x10c) returned 1
	[0047.248] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ebff840, pdwDataLen=0xe68ebff7c0 | out: pbData=0xe68ebff840*, pdwDataLen=0xe68ebff7c0*=0x10c) returned 1
	[0047.248] WriteFile (in: hFile=0x8bc, lpBuffer=0xe68ebff840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ebff7b4, lpOverlapped=0x0 | out: lpBuffer=0xe68ebff840*, lpNumberOfBytesWritten=0xe68ebff7b4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.248] CloseHandle (hObject=0x8bc) returned 1
	[0047.264] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.268] CryptDestroyKey (hKey=0x274ba5c1130) returned 1

Thread:
	id = 198
	os_tid = 0xecc

	[0047.180] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", dwFileAttributes=0x80) returned 1
	[0047.180] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c0
	[0047.180] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0xe68ec7faa8 | out: lpFileSize=0xe68ec7faa8*=79996) returned 1
	[0047.180] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0xe68ec7fac0 | out: lpFileSize=0xe68ec7fac0*=79996) returned 1
	[0047.180] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x1375a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.181] ReadFile (in: hFile=0x8c0, lpBuffer=0xe68ec7fb10, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ec7fad0, lpOverlapped=0x0 | out: lpBuffer=0xe68ec7fb10*, lpNumberOfBytesRead=0xe68ec7fad0*=0x19, lpOverlapped=0x0) returned 1
	[0047.291] SetFilePointer (in: hFile=0x8c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.291] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ec7fa90 | out: phKey=0xe68ec7fa90*=0x274ba5c16e0) returned 1
	[0047.291] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.291] SetFilePointer (in: hFile=0x8c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.291] ReadFile (in: hFile=0x8c0, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x1387c, lpNumberOfBytesRead=0xe68ec7faa0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68ec7faa0*=0x1387c, lpOverlapped=0x0) returned 1
	[0047.349] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ec7fa9c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ec7fa9c*=0xf4250) returned 1
	[0047.349] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68ec7fa98*=0x1387c, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68ec7fa98*=0x13880) returned 1
	[0047.349] SetFilePointer (in: hFile=0x8c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.349] WriteFile (in: hFile=0x8c0, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0xe68ec7faa0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68ec7faa0*=0x13880, lpOverlapped=0x0) returned 1
	[0047.349] WriteFile (in: hFile=0x8c0, lpBuffer=0xe68ec7fad8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ec7faa4, lpOverlapped=0x0 | out: lpBuffer=0xe68ec7fad8*, lpNumberOfBytesWritten=0xe68ec7faa4*=0x6, lpOverlapped=0x0) returned 1
	[0047.349] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ec7fab0 | out: pbData=0x0*, pdwDataLen=0xe68ec7fab0*=0x10c) returned 1
	[0047.349] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ec7fb30, pdwDataLen=0xe68ec7fab0 | out: pbData=0xe68ec7fb30*, pdwDataLen=0xe68ec7fab0*=0x10c) returned 1
	[0047.350] WriteFile (in: hFile=0x8c0, lpBuffer=0xe68ec7fb30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ec7faa4, lpOverlapped=0x0 | out: lpBuffer=0xe68ec7fb30*, lpNumberOfBytesWritten=0xe68ec7faa4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.350] CloseHandle (hObject=0x8c0) returned 1
	[0047.367] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.371] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 199
	os_tid = 0xec8

	[0047.371] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0047.371] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c0
	[0047.372] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0xe68ecffca8 | out: lpFileSize=0xe68ecffca8*=201796) returned 1
	[0047.372] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0xe68ecffcc0 | out: lpFileSize=0xe68ecffcc0*=201796) returned 1
	[0047.372] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x31322, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.372] ReadFile (in: hFile=0x8c0, lpBuffer=0xe68ecffd10, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ecffcd0, lpOverlapped=0x0 | out: lpBuffer=0xe68ecffd10*, lpNumberOfBytesRead=0xe68ecffcd0*=0x19, lpOverlapped=0x0) returned 1
	[0047.375] SetFilePointer (in: hFile=0x8c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.375] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ecffc90 | out: phKey=0xe68ecffc90*=0x274ba5c1130) returned 1
	[0047.375] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.376] SetFilePointer (in: hFile=0x8c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.376] ReadFile (in: hFile=0x8c0, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x31444, lpNumberOfBytesRead=0xe68ecffca0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68ecffca0*=0x31444, lpOverlapped=0x0) returned 1
	[0047.392] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ecffc9c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ecffc9c*=0xf4250) returned 1
	[0047.392] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68ecffc98*=0x31444, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68ecffc98*=0x31450) returned 1
	[0047.392] SetFilePointer (in: hFile=0x8c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.392] WriteFile (in: hFile=0x8c0, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0xe68ecffca0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68ecffca0*=0x31450, lpOverlapped=0x0) returned 1
	[0047.393] WriteFile (in: hFile=0x8c0, lpBuffer=0xe68ecffcd8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ecffca4, lpOverlapped=0x0 | out: lpBuffer=0xe68ecffcd8*, lpNumberOfBytesWritten=0xe68ecffca4*=0x6, lpOverlapped=0x0) returned 1
	[0047.393] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ecffcb0 | out: pbData=0x0*, pdwDataLen=0xe68ecffcb0*=0x10c) returned 1
	[0047.393] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ecffd30, pdwDataLen=0xe68ecffcb0 | out: pbData=0xe68ecffd30*, pdwDataLen=0xe68ecffcb0*=0x10c) returned 1
	[0047.393] WriteFile (in: hFile=0x8c0, lpBuffer=0xe68ecffd30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ecffca4, lpOverlapped=0x0 | out: lpBuffer=0xe68ecffd30*, lpNumberOfBytesWritten=0xe68ecffca4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.393] CloseHandle (hObject=0x8c0) returned 1
	[0047.409] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.413] CryptDestroyKey (hKey=0x274ba5c1130) returned 1

Thread:
	id = 200
	os_tid = 0xdfc

	[0047.373] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0047.373] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8ac
	[0047.373] GetFileSizeEx (in: hFile=0x8ac, lpFileSize=0xe68ed7f648 | out: lpFileSize=0xe68ed7f648*=39042) returned 1
	[0047.373] GetFileSizeEx (in: hFile=0x8ac, lpFileSize=0xe68ed7f660 | out: lpFileSize=0xe68ed7f660*=39042) returned 1
	[0047.373] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x9760, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.373] ReadFile (in: hFile=0x8ac, lpBuffer=0xe68ed7f6b0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ed7f670, lpOverlapped=0x0 | out: lpBuffer=0xe68ed7f6b0*, lpNumberOfBytesRead=0xe68ed7f670*=0x19, lpOverlapped=0x0) returned 1
	[0047.382] SetFilePointer (in: hFile=0x8ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.382] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ed7f630 | out: phKey=0xe68ed7f630*=0x274ba5c1210) returned 1
	[0047.382] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.382] SetFilePointer (in: hFile=0x8ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.382] ReadFile (in: hFile=0x8ac, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x9882, lpNumberOfBytesRead=0xe68ed7f640, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68ed7f640*=0x9882, lpOverlapped=0x0) returned 1
	[0047.485] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ed7f63c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ed7f63c*=0xf4250) returned 1
	[0047.485] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68ed7f638*=0x9882, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68ed7f638*=0x9890) returned 1
	[0047.485] SetFilePointer (in: hFile=0x8ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.485] WriteFile (in: hFile=0x8ac, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0xe68ed7f640, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68ed7f640*=0x9890, lpOverlapped=0x0) returned 1
	[0047.485] WriteFile (in: hFile=0x8ac, lpBuffer=0xe68ed7f678*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ed7f644, lpOverlapped=0x0 | out: lpBuffer=0xe68ed7f678*, lpNumberOfBytesWritten=0xe68ed7f644*=0x6, lpOverlapped=0x0) returned 1
	[0047.485] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ed7f650 | out: pbData=0x0*, pdwDataLen=0xe68ed7f650*=0x10c) returned 1
	[0047.485] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ed7f6d0, pdwDataLen=0xe68ed7f650 | out: pbData=0xe68ed7f6d0*, pdwDataLen=0xe68ed7f650*=0x10c) returned 1
	[0047.485] WriteFile (in: hFile=0x8ac, lpBuffer=0xe68ed7f6d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ed7f644, lpOverlapped=0x0 | out: lpBuffer=0xe68ed7f6d0*, lpNumberOfBytesWritten=0xe68ed7f644*=0x10c, lpOverlapped=0x0) returned 1
	[0047.485] CloseHandle (hObject=0x8ac) returned 1
	[0047.502] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.505] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 201
	os_tid = 0x470

	[0047.374] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", dwFileAttributes=0x80) returned 1
	[0047.374] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0047.375] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68edff9b8 | out: lpFileSize=0xe68edff9b8*=16118) returned 1
	[0047.375] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68edff9d0 | out: lpFileSize=0xe68edff9d0*=16118) returned 1
	[0047.375] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x3dd4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.375] ReadFile (in: hFile=0x8b4, lpBuffer=0xe68edffa20, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68edff9e0, lpOverlapped=0x0 | out: lpBuffer=0xe68edffa20*, lpNumberOfBytesRead=0xe68edff9e0*=0x19, lpOverlapped=0x0) returned 1
	[0047.541] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.541] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68edff9a0 | out: phKey=0xe68edff9a0*=0x274ba5c1210) returned 1
	[0047.541] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.541] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.541] ReadFile (in: hFile=0x8b4, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x3ef6, lpNumberOfBytesRead=0xe68edff9b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68edff9b0*=0x3ef6, lpOverlapped=0x0) returned 1
	[0047.588] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68edff9ac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68edff9ac*=0xf4250) returned 1
	[0047.588] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68edff9a8*=0x3ef6, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68edff9a8*=0x3f00) returned 1
	[0047.588] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.588] WriteFile (in: hFile=0x8b4, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0xe68edff9b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68edff9b0*=0x3f00, lpOverlapped=0x0) returned 1
	[0047.588] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68edff9e8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68edff9b4, lpOverlapped=0x0 | out: lpBuffer=0xe68edff9e8*, lpNumberOfBytesWritten=0xe68edff9b4*=0x6, lpOverlapped=0x0) returned 1
	[0047.588] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68edff9c0 | out: pbData=0x0*, pdwDataLen=0xe68edff9c0*=0x10c) returned 1
	[0047.588] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68edffa40, pdwDataLen=0xe68edff9c0 | out: pbData=0xe68edffa40*, pdwDataLen=0xe68edff9c0*=0x10c) returned 1
	[0047.588] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68edffa40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68edff9b4, lpOverlapped=0x0 | out: lpBuffer=0xe68edffa40*, lpNumberOfBytesWritten=0xe68edff9b4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.589] CloseHandle (hObject=0x8b4) returned 1
	[0047.605] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.609] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 202
	os_tid = 0xc58

	[0047.379] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", dwFileAttributes=0x80) returned 1
	[0047.379] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0047.379] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0xe68ee7f698 | out: lpFileSize=0xe68ee7f698*=88533) returned 1
	[0047.379] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0xe68ee7f6b0 | out: lpFileSize=0xe68ee7f6b0*=88533) returned 1
	[0047.379] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0x158b3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.379] ReadFile (in: hFile=0x8a4, lpBuffer=0xe68ee7f700, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ee7f6c0, lpOverlapped=0x0 | out: lpBuffer=0xe68ee7f700*, lpNumberOfBytesRead=0xe68ee7f6c0*=0x19, lpOverlapped=0x0) returned 1
	[0047.439] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.439] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ee7f680 | out: phKey=0xe68ee7f680*=0x274ba5c1280) returned 1
	[0047.439] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.439] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.439] ReadFile (in: hFile=0x8a4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x159d5, lpNumberOfBytesRead=0xe68ee7f690, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68ee7f690*=0x159d5, lpOverlapped=0x0) returned 1
	[0047.542] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ee7f68c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ee7f68c*=0xf4250) returned 1
	[0047.542] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68ee7f688*=0x159d5, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68ee7f688*=0x159e0) returned 1
	[0047.542] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.542] WriteFile (in: hFile=0x8a4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0xe68ee7f690, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68ee7f690*=0x159e0, lpOverlapped=0x0) returned 1
	[0047.543] WriteFile (in: hFile=0x8a4, lpBuffer=0xe68ee7f6c8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ee7f694, lpOverlapped=0x0 | out: lpBuffer=0xe68ee7f6c8*, lpNumberOfBytesWritten=0xe68ee7f694*=0x6, lpOverlapped=0x0) returned 1
	[0047.543] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ee7f6a0 | out: pbData=0x0*, pdwDataLen=0xe68ee7f6a0*=0x10c) returned 1
	[0047.543] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ee7f720, pdwDataLen=0xe68ee7f6a0 | out: pbData=0xe68ee7f720*, pdwDataLen=0xe68ee7f6a0*=0x10c) returned 1
	[0047.543] WriteFile (in: hFile=0x8a4, lpBuffer=0xe68ee7f720*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ee7f694, lpOverlapped=0x0 | out: lpBuffer=0xe68ee7f720*, lpNumberOfBytesWritten=0xe68ee7f694*=0x10c, lpOverlapped=0x0) returned 1
	[0047.543] CloseHandle (hObject=0x8a4) returned 1
	[0047.559] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.563] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 203
	os_tid = 0xe90

	[0047.380] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", dwFileAttributes=0x80) returned 1
	[0047.380] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8bc
	[0047.380] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0xe68eeffbd8 | out: lpFileSize=0xe68eeffbd8*=93314) returned 1
	[0047.380] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0xe68eeffbf0 | out: lpFileSize=0xe68eeffbf0*=93314) returned 1
	[0047.380] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x16b60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.380] ReadFile (in: hFile=0x8bc, lpBuffer=0xe68eeffc40, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68eeffc00, lpOverlapped=0x0 | out: lpBuffer=0xe68eeffc40*, lpNumberOfBytesRead=0xe68eeffc00*=0x19, lpOverlapped=0x0) returned 1
	[0047.389] SetFilePointer (in: hFile=0x8bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.389] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68eeffbc0 | out: phKey=0xe68eeffbc0*=0x274ba5c12f0) returned 1
	[0047.389] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0047.389] SetFilePointer (in: hFile=0x8bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.389] ReadFile (in: hFile=0x8bc, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x16c82, lpNumberOfBytesRead=0xe68eeffbd0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68eeffbd0*=0x16c82, lpOverlapped=0x0) returned 1
	[0047.462] CryptEncrypt (in: hKey=0x274ba5c12f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68eeffbcc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68eeffbcc*=0xf4250) returned 1
	[0047.462] CryptEncrypt (in: hKey=0x274ba5c12f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68eeffbc8*=0x16c82, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68eeffbc8*=0x16c90) returned 1
	[0047.463] SetFilePointer (in: hFile=0x8bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.463] WriteFile (in: hFile=0x8bc, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0xe68eeffbd0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68eeffbd0*=0x16c90, lpOverlapped=0x0) returned 1
	[0047.463] WriteFile (in: hFile=0x8bc, lpBuffer=0xe68eeffc08*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68eeffbd4, lpOverlapped=0x0 | out: lpBuffer=0xe68eeffc08*, lpNumberOfBytesWritten=0xe68eeffbd4*=0x6, lpOverlapped=0x0) returned 1
	[0047.463] CryptExportKey (in: hKey=0x274ba5c12f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68eeffbe0 | out: pbData=0x0*, pdwDataLen=0xe68eeffbe0*=0x10c) returned 1
	[0047.463] CryptExportKey (in: hKey=0x274ba5c12f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68eeffc60, pdwDataLen=0xe68eeffbe0 | out: pbData=0xe68eeffc60*, pdwDataLen=0xe68eeffbe0*=0x10c) returned 1
	[0047.463] WriteFile (in: hFile=0x8bc, lpBuffer=0xe68eeffc60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68eeffbd4, lpOverlapped=0x0 | out: lpBuffer=0xe68eeffc60*, lpNumberOfBytesWritten=0xe68eeffbd4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.463] CloseHandle (hObject=0x8bc) returned 1
	[0047.479] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.483] CryptDestroyKey (hKey=0x274ba5c12f0) returned 1

Thread:
	id = 204
	os_tid = 0xc6c

	[0047.381] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0047.383] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a8
	[0047.383] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0xe68ef7f788 | out: lpFileSize=0xe68ef7f788*=39050) returned 1
	[0047.383] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0xe68ef7f7a0 | out: lpFileSize=0xe68ef7f7a0*=39050) returned 1
	[0047.383] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x9768, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.383] ReadFile (in: hFile=0x8a8, lpBuffer=0xe68ef7f7f0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68ef7f7b0, lpOverlapped=0x0 | out: lpBuffer=0xe68ef7f7f0*, lpNumberOfBytesRead=0xe68ef7f7b0*=0x19, lpOverlapped=0x0) returned 1
	[0047.483] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.483] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68ef7f770 | out: phKey=0xe68ef7f770*=0x274ba5c12f0) returned 1
	[0047.483] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0047.484] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.484] ReadFile (in: hFile=0x8a8, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x988a, lpNumberOfBytesRead=0xe68ef7f780, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68ef7f780*=0x988a, lpOverlapped=0x0) returned 1
	[0047.566] CryptEncrypt (in: hKey=0x274ba5c12f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68ef7f77c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68ef7f77c*=0xf4250) returned 1
	[0047.566] CryptEncrypt (in: hKey=0x274ba5c12f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68ef7f778*=0x988a, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68ef7f778*=0x9890) returned 1
	[0047.566] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.566] WriteFile (in: hFile=0x8a8, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0xe68ef7f780, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68ef7f780*=0x9890, lpOverlapped=0x0) returned 1
	[0047.567] WriteFile (in: hFile=0x8a8, lpBuffer=0xe68ef7f7b8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68ef7f784, lpOverlapped=0x0 | out: lpBuffer=0xe68ef7f7b8*, lpNumberOfBytesWritten=0xe68ef7f784*=0x6, lpOverlapped=0x0) returned 1
	[0047.567] CryptExportKey (in: hKey=0x274ba5c12f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68ef7f790 | out: pbData=0x0*, pdwDataLen=0xe68ef7f790*=0x10c) returned 1
	[0047.567] CryptExportKey (in: hKey=0x274ba5c12f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68ef7f810, pdwDataLen=0xe68ef7f790 | out: pbData=0xe68ef7f810*, pdwDataLen=0xe68ef7f790*=0x10c) returned 1
	[0047.567] WriteFile (in: hFile=0x8a8, lpBuffer=0xe68ef7f810*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68ef7f784, lpOverlapped=0x0 | out: lpBuffer=0xe68ef7f810*, lpNumberOfBytesWritten=0xe68ef7f784*=0x10c, lpOverlapped=0x0) returned 1
	[0047.567] CloseHandle (hObject=0x8a8) returned 1
	[0047.583] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.587] CryptDestroyKey (hKey=0x274ba5c12f0) returned 1

Thread:
	id = 205
	os_tid = 0x42c

	[0047.384] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", dwFileAttributes=0x80) returned 1
	[0047.385] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b0
	[0047.385] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0xe68efff7d8 | out: lpFileSize=0xe68efff7d8*=1150) returned 1
	[0047.385] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0xe68efff7f0 | out: lpFileSize=0xe68efff7f0*=1150) returned 1
	[0047.385] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.385] ReadFile (in: hFile=0x8b0, lpBuffer=0xe68efff840, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68efff800, lpOverlapped=0x0 | out: lpBuffer=0xe68efff840*, lpNumberOfBytesRead=0xe68efff800*=0x19, lpOverlapped=0x0) returned 1
	[0047.414] SetFilePointer (in: hFile=0x8b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.414] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68efff7c0 | out: phKey=0xe68efff7c0*=0x274ba5c1280) returned 1
	[0047.414] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.414] SetFilePointer (in: hFile=0x8b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.414] ReadFile (in: hFile=0x8b0, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xe68efff7d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68efff7d0*=0x47e, lpOverlapped=0x0) returned 1
	[0047.414] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68efff7cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68efff7cc*=0xf4250) returned 1
	[0047.414] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68efff7c8*=0x47e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68efff7c8*=0x480) returned 1
	[0047.414] SetFilePointer (in: hFile=0x8b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.414] WriteFile (in: hFile=0x8b0, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xe68efff7d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68efff7d0*=0x480, lpOverlapped=0x0) returned 1
	[0047.415] WriteFile (in: hFile=0x8b0, lpBuffer=0xe68efff808*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68efff7d4, lpOverlapped=0x0 | out: lpBuffer=0xe68efff808*, lpNumberOfBytesWritten=0xe68efff7d4*=0x6, lpOverlapped=0x0) returned 1
	[0047.415] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68efff7e0 | out: pbData=0x0*, pdwDataLen=0xe68efff7e0*=0x10c) returned 1
	[0047.415] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68efff860, pdwDataLen=0xe68efff7e0 | out: pbData=0xe68efff860*, pdwDataLen=0xe68efff7e0*=0x10c) returned 1
	[0047.415] WriteFile (in: hFile=0x8b0, lpBuffer=0xe68efff860*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68efff7d4, lpOverlapped=0x0 | out: lpBuffer=0xe68efff860*, lpNumberOfBytesWritten=0xe68efff7d4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.415] CloseHandle (hObject=0x8b0) returned 1
	[0047.431] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.438] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 206
	os_tid = 0xce8

	[0047.386] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", dwFileAttributes=0x80) returned 1
	[0047.386] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b8
	[0047.386] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0xe68f07f5c8 | out: lpFileSize=0xe68f07f5c8*=894) returned 1
	[0047.386] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0xe68f07f5e0 | out: lpFileSize=0xe68f07f5e0*=894) returned 1
	[0047.386] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.386] ReadFile (in: hFile=0x8b8, lpBuffer=0xe68f07f630, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f07f5f0, lpOverlapped=0x0 | out: lpBuffer=0xe68f07f630*, lpNumberOfBytesRead=0xe68f07f5f0*=0x19, lpOverlapped=0x0) returned 1
	[0047.440] SetFilePointer (in: hFile=0x8b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.440] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f07f5b0 | out: phKey=0xe68f07f5b0*=0x274ba5c1590) returned 1
	[0047.440] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd590000
	[0047.441] SetFilePointer (in: hFile=0x8b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.441] ReadFile (in: hFile=0x8b8, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f07f5c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f07f5c0*=0x37e, lpOverlapped=0x0) returned 1
	[0047.441] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f07f5bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f07f5bc*=0xf4250) returned 1
	[0047.441] CryptEncrypt (in: hKey=0x274ba5c1590, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f07f5b8*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f07f5b8*=0x380) returned 1
	[0047.441] SetFilePointer (in: hFile=0x8b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.441] WriteFile (in: hFile=0x8b8, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f07f5c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f07f5c0*=0x380, lpOverlapped=0x0) returned 1
	[0047.441] WriteFile (in: hFile=0x8b8, lpBuffer=0xe68f07f5f8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f07f5c4, lpOverlapped=0x0 | out: lpBuffer=0xe68f07f5f8*, lpNumberOfBytesWritten=0xe68f07f5c4*=0x6, lpOverlapped=0x0) returned 1
	[0047.441] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f07f5d0 | out: pbData=0x0*, pdwDataLen=0xe68f07f5d0*=0x10c) returned 1
	[0047.441] CryptExportKey (in: hKey=0x274ba5c1590, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f07f650, pdwDataLen=0xe68f07f5d0 | out: pbData=0xe68f07f650*, pdwDataLen=0xe68f07f5d0*=0x10c) returned 1
	[0047.441] WriteFile (in: hFile=0x8b8, lpBuffer=0xe68f07f650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f07f5c4, lpOverlapped=0x0 | out: lpBuffer=0xe68f07f650*, lpNumberOfBytesWritten=0xe68f07f5c4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.441] CloseHandle (hObject=0x8b8) returned 1
	[0047.458] VirtualFree (lpAddress=0x274bd590000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.462] CryptDestroyKey (hKey=0x274ba5c1590) returned 1

Thread:
	id = 207
	os_tid = 0xa80

	[0047.387] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", dwFileAttributes=0x80) returned 1
	[0047.387] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c4
	[0047.387] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0xe68f0ffd08 | out: lpFileSize=0xe68f0ffd08*=894) returned 1
	[0047.387] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0xe68f0ffd20 | out: lpFileSize=0xe68f0ffd20*=894) returned 1
	[0047.387] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.387] ReadFile (in: hFile=0x8c4, lpBuffer=0xe68f0ffd70, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f0ffd30, lpOverlapped=0x0 | out: lpBuffer=0xe68f0ffd70*, lpNumberOfBytesRead=0xe68f0ffd30*=0x19, lpOverlapped=0x0) returned 1
	[0047.506] SetFilePointer (in: hFile=0x8c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.506] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f0ffcf0 | out: phKey=0xe68f0ffcf0*=0x274ba5c1210) returned 1
	[0047.506] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0047.506] SetFilePointer (in: hFile=0x8c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.506] ReadFile (in: hFile=0x8c4, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f0ffd00, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68f0ffd00*=0x37e, lpOverlapped=0x0) returned 1
	[0047.506] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f0ffcfc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f0ffcfc*=0xf4250) returned 1
	[0047.507] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68f0ffcf8*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68f0ffcf8*=0x380) returned 1
	[0047.507] SetFilePointer (in: hFile=0x8c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.507] WriteFile (in: hFile=0x8c4, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f0ffd00, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68f0ffd00*=0x380, lpOverlapped=0x0) returned 1
	[0047.507] WriteFile (in: hFile=0x8c4, lpBuffer=0xe68f0ffd38*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f0ffd04, lpOverlapped=0x0 | out: lpBuffer=0xe68f0ffd38*, lpNumberOfBytesWritten=0xe68f0ffd04*=0x6, lpOverlapped=0x0) returned 1
	[0047.507] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f0ffd10 | out: pbData=0x0*, pdwDataLen=0xe68f0ffd10*=0x10c) returned 1
	[0047.507] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f0ffd90, pdwDataLen=0xe68f0ffd10 | out: pbData=0xe68f0ffd90*, pdwDataLen=0xe68f0ffd10*=0x10c) returned 1
	[0047.507] WriteFile (in: hFile=0x8c4, lpBuffer=0xe68f0ffd90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f0ffd04, lpOverlapped=0x0 | out: lpBuffer=0xe68f0ffd90*, lpNumberOfBytesWritten=0xe68f0ffd04*=0x10c, lpOverlapped=0x0) returned 1
	[0047.507] CloseHandle (hObject=0x8c4) returned 1
	[0047.537] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.540] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 208
	os_tid = 0xa7c

	[0047.388] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", dwFileAttributes=0x80) returned 1
	[0047.391] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8c8
	[0047.391] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0xe68f17f5c8 | out: lpFileSize=0xe68f17f5c8*=894) returned 1
	[0047.391] GetFileSizeEx (in: hFile=0x8c8, lpFileSize=0xe68f17f5e0 | out: lpFileSize=0xe68f17f5e0*=894) returned 1
	[0047.391] SetFilePointerEx (in: hFile=0x8c8, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.391] ReadFile (in: hFile=0x8c8, lpBuffer=0xe68f17f630, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f17f5f0, lpOverlapped=0x0 | out: lpBuffer=0xe68f17f630*, lpNumberOfBytesRead=0xe68f17f5f0*=0x19, lpOverlapped=0x0) returned 1
	[0047.615] SetFilePointer (in: hFile=0x8c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.615] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f17f5b0 | out: phKey=0xe68f17f5b0*=0x274ba5c16e0) returned 1
	[0047.615] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.615] SetFilePointer (in: hFile=0x8c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.615] ReadFile (in: hFile=0x8c8, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f17f5c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f17f5c0*=0x37e, lpOverlapped=0x0) returned 1
	[0047.615] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f17f5bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f17f5bc*=0xf4250) returned 1
	[0047.616] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f17f5b8*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f17f5b8*=0x380) returned 1
	[0047.616] SetFilePointer (in: hFile=0x8c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.616] WriteFile (in: hFile=0x8c8, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f17f5c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f17f5c0*=0x380, lpOverlapped=0x0) returned 1
	[0047.616] WriteFile (in: hFile=0x8c8, lpBuffer=0xe68f17f5f8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f17f5c4, lpOverlapped=0x0 | out: lpBuffer=0xe68f17f5f8*, lpNumberOfBytesWritten=0xe68f17f5c4*=0x6, lpOverlapped=0x0) returned 1
	[0047.616] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f17f5d0 | out: pbData=0x0*, pdwDataLen=0xe68f17f5d0*=0x10c) returned 1
	[0047.616] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f17f650, pdwDataLen=0xe68f17f5d0 | out: pbData=0xe68f17f650*, pdwDataLen=0xe68f17f5d0*=0x10c) returned 1
	[0047.616] WriteFile (in: hFile=0x8c8, lpBuffer=0xe68f17f650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f17f5c4, lpOverlapped=0x0 | out: lpBuffer=0xe68f17f650*, lpNumberOfBytesWritten=0xe68f17f5c4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.616] CloseHandle (hObject=0x8c8) returned 1
	[0047.633] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.637] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 209
	os_tid = 0xa78

	[0047.610] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", dwFileAttributes=0x80) returned 1
	[0047.611] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0047.611] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68f1ff848 | out: lpFileSize=0xe68f1ff848*=894) returned 1
	[0047.611] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68f1ff860 | out: lpFileSize=0xe68f1ff860*=894) returned 1
	[0047.611] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.611] ReadFile (in: hFile=0x8b4, lpBuffer=0xe68f1ff8b0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f1ff870, lpOverlapped=0x0 | out: lpBuffer=0xe68f1ff8b0*, lpNumberOfBytesRead=0xe68f1ff870*=0x19, lpOverlapped=0x0) returned 1
	[0047.681] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.681] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f1ff830 | out: phKey=0xe68f1ff830*=0x274ba5c1210) returned 1
	[0047.681] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.682] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.682] ReadFile (in: hFile=0x8b4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f1ff840, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f1ff840*=0x37e, lpOverlapped=0x0) returned 1
	[0047.682] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f1ff83c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f1ff83c*=0xf4250) returned 1
	[0047.682] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f1ff838*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f1ff838*=0x380) returned 1
	[0047.682] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.682] WriteFile (in: hFile=0x8b4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f1ff840, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f1ff840*=0x380, lpOverlapped=0x0) returned 1
	[0047.682] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68f1ff878*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f1ff844, lpOverlapped=0x0 | out: lpBuffer=0xe68f1ff878*, lpNumberOfBytesWritten=0xe68f1ff844*=0x6, lpOverlapped=0x0) returned 1
	[0047.682] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f1ff850 | out: pbData=0x0*, pdwDataLen=0xe68f1ff850*=0x10c) returned 1
	[0047.682] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f1ff8d0, pdwDataLen=0xe68f1ff850 | out: pbData=0xe68f1ff8d0*, pdwDataLen=0xe68f1ff850*=0x10c) returned 1
	[0047.682] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68f1ff8d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f1ff844, lpOverlapped=0x0 | out: lpBuffer=0xe68f1ff8d0*, lpNumberOfBytesWritten=0xe68f1ff844*=0x10c, lpOverlapped=0x0) returned 1
	[0047.682] CloseHandle (hObject=0x8b4) returned 1
	[0047.699] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.703] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 210
	os_tid = 0x8f0

	[0047.612] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", dwFileAttributes=0x80) returned 1
	[0047.612] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a8
	[0047.612] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0xe68f27f648 | out: lpFileSize=0xe68f27f648*=894) returned 1
	[0047.612] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0xe68f27f660 | out: lpFileSize=0xe68f27f660*=894) returned 1
	[0047.612] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.612] ReadFile (in: hFile=0x8a8, lpBuffer=0xe68f27f6b0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f27f670, lpOverlapped=0x0 | out: lpBuffer=0xe68f27f6b0*, lpNumberOfBytesRead=0xe68f27f670*=0x19, lpOverlapped=0x0) returned 1
	[0047.637] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.637] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f27f630 | out: phKey=0xe68f27f630*=0x274ba5c16e0) returned 1
	[0047.637] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.638] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.638] ReadFile (in: hFile=0x8a8, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f27f640, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f27f640*=0x37e, lpOverlapped=0x0) returned 1
	[0047.638] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f27f63c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f27f63c*=0xf4250) returned 1
	[0047.638] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f27f638*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f27f638*=0x380) returned 1
	[0047.638] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.638] WriteFile (in: hFile=0x8a8, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f27f640, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f27f640*=0x380, lpOverlapped=0x0) returned 1
	[0047.638] WriteFile (in: hFile=0x8a8, lpBuffer=0xe68f27f678*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f27f644, lpOverlapped=0x0 | out: lpBuffer=0xe68f27f678*, lpNumberOfBytesWritten=0xe68f27f644*=0x6, lpOverlapped=0x0) returned 1
	[0047.638] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f27f650 | out: pbData=0x0*, pdwDataLen=0xe68f27f650*=0x10c) returned 1
	[0047.638] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f27f6d0, pdwDataLen=0xe68f27f650 | out: pbData=0xe68f27f6d0*, pdwDataLen=0xe68f27f650*=0x10c) returned 1
	[0047.638] WriteFile (in: hFile=0x8a8, lpBuffer=0xe68f27f6d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f27f644, lpOverlapped=0x0 | out: lpBuffer=0xe68f27f6d0*, lpNumberOfBytesWritten=0xe68f27f644*=0x10c, lpOverlapped=0x0) returned 1
	[0047.638] CloseHandle (hObject=0x8a8) returned 1
	[0047.654] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.658] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 211
	os_tid = 0xc48

	[0047.613] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", dwFileAttributes=0x80) returned 1
	[0047.613] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8a4
	[0047.614] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0xe68f2ff7a8 | out: lpFileSize=0xe68f2ff7a8*=894) returned 1
	[0047.614] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0xe68f2ff7c0 | out: lpFileSize=0xe68f2ff7c0*=894) returned 1
	[0047.614] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.614] ReadFile (in: hFile=0x8a4, lpBuffer=0xe68f2ff810, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f2ff7d0, lpOverlapped=0x0 | out: lpBuffer=0xe68f2ff810*, lpNumberOfBytesRead=0xe68f2ff7d0*=0x19, lpOverlapped=0x0) returned 1
	[0047.659] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.659] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f2ff790 | out: phKey=0xe68f2ff790*=0x274ba5c1210) returned 1
	[0047.659] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.660] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.660] ReadFile (in: hFile=0x8a4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f2ff7a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f2ff7a0*=0x37e, lpOverlapped=0x0) returned 1
	[0047.660] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f2ff79c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f2ff79c*=0xf4250) returned 1
	[0047.660] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f2ff798*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f2ff798*=0x380) returned 1
	[0047.660] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.660] WriteFile (in: hFile=0x8a4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f2ff7a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f2ff7a0*=0x380, lpOverlapped=0x0) returned 1
	[0047.660] WriteFile (in: hFile=0x8a4, lpBuffer=0xe68f2ff7d8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f2ff7a4, lpOverlapped=0x0 | out: lpBuffer=0xe68f2ff7d8*, lpNumberOfBytesWritten=0xe68f2ff7a4*=0x6, lpOverlapped=0x0) returned 1
	[0047.660] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f2ff7b0 | out: pbData=0x0*, pdwDataLen=0xe68f2ff7b0*=0x10c) returned 1
	[0047.660] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f2ff830, pdwDataLen=0xe68f2ff7b0 | out: pbData=0xe68f2ff830*, pdwDataLen=0xe68f2ff7b0*=0x10c) returned 1
	[0047.660] WriteFile (in: hFile=0x8a4, lpBuffer=0xe68f2ff830*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f2ff7a4, lpOverlapped=0x0 | out: lpBuffer=0xe68f2ff830*, lpNumberOfBytesWritten=0xe68f2ff7a4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.660] CloseHandle (hObject=0x8a4) returned 1
	[0047.677] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0047.681] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 212
	os_tid = 0x48c

	[0047.615] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", dwFileAttributes=0x80) returned 1
	[0047.704] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x8b4
	[0047.704] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68f37f5f8 | out: lpFileSize=0xe68f37f5f8*=894) returned 1
	[0047.704] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0xe68f37f610 | out: lpFileSize=0xe68f37f610*=894) returned 1
	[0047.704] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0047.704] ReadFile (in: hFile=0x8b4, lpBuffer=0xe68f37f660, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f37f620, lpOverlapped=0x0 | out: lpBuffer=0xe68f37f660*, lpNumberOfBytesRead=0xe68f37f620*=0x19, lpOverlapped=0x0) returned 1
	[0047.705] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.706] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f37f5e0 | out: phKey=0xe68f37f5e0*=0x274ba5c1210) returned 1
	[0047.706] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0047.706] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.706] ReadFile (in: hFile=0x8b4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f37f5f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f37f5f0*=0x37e, lpOverlapped=0x0) returned 1
	[0047.706] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f37f5ec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f37f5ec*=0xf4250) returned 1
	[0047.706] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f37f5e8*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f37f5e8*=0x380) returned 1
	[0047.706] SetFilePointer (in: hFile=0x8b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0047.706] WriteFile (in: hFile=0x8b4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f37f5f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f37f5f0*=0x380, lpOverlapped=0x0) returned 1
	[0047.706] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68f37f628*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f37f5f4, lpOverlapped=0x0 | out: lpBuffer=0xe68f37f628*, lpNumberOfBytesWritten=0xe68f37f5f4*=0x6, lpOverlapped=0x0) returned 1
	[0047.706] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f37f600 | out: pbData=0x0*, pdwDataLen=0xe68f37f600*=0x10c) returned 1
	[0047.706] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f37f680, pdwDataLen=0xe68f37f600 | out: pbData=0xe68f37f680*, pdwDataLen=0xe68f37f600*=0x10c) returned 1
	[0047.706] WriteFile (in: hFile=0x8b4, lpBuffer=0xe68f37f680*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f37f5f4, lpOverlapped=0x0 | out: lpBuffer=0xe68f37f680*, lpNumberOfBytesWritten=0xe68f37f5f4*=0x10c, lpOverlapped=0x0) returned 1
	[0047.706] CloseHandle (hObject=0x8b4) returned 1
	[0047.808] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.102] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 214
	os_tid = 0xeb8

	[0048.103] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", dwFileAttributes=0x80) returned 1
	[0048.103] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c
	[0048.104] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0xe68f3ff688 | out: lpFileSize=0xe68f3ff688*=894) returned 1
	[0048.104] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0xe68f3ff6a0 | out: lpFileSize=0xe68f3ff6a0*=894) returned 1
	[0048.104] SetFilePointerEx (in: hFile=0x90c, liDistanceToMove=0x25c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.104] ReadFile (in: hFile=0x90c, lpBuffer=0xe68f3ff6f0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f3ff6b0, lpOverlapped=0x0 | out: lpBuffer=0xe68f3ff6f0*, lpNumberOfBytesRead=0xe68f3ff6b0*=0x19, lpOverlapped=0x0) returned 1
	[0048.132] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.132] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f3ff670 | out: phKey=0xe68f3ff670*=0x274ba5c0e20) returned 1
	[0048.132] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0048.133] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.133] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x37e, lpNumberOfBytesRead=0xe68f3ff680, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f3ff680*=0x37e, lpOverlapped=0x0) returned 1
	[0048.133] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f3ff67c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f3ff67c*=0xf4250) returned 1
	[0048.133] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f3ff678*=0x37e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f3ff678*=0x380) returned 1
	[0048.133] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.133] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0xe68f3ff680, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f3ff680*=0x380, lpOverlapped=0x0) returned 1
	[0048.133] WriteFile (in: hFile=0x90c, lpBuffer=0xe68f3ff6b8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f3ff684, lpOverlapped=0x0 | out: lpBuffer=0xe68f3ff6b8*, lpNumberOfBytesWritten=0xe68f3ff684*=0x6, lpOverlapped=0x0) returned 1
	[0048.133] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f3ff690 | out: pbData=0x0*, pdwDataLen=0xe68f3ff690*=0x10c) returned 1
	[0048.133] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f3ff710, pdwDataLen=0xe68f3ff690 | out: pbData=0xe68f3ff710*, pdwDataLen=0xe68f3ff690*=0x10c) returned 1
	[0048.133] WriteFile (in: hFile=0x90c, lpBuffer=0xe68f3ff710*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f3ff684, lpOverlapped=0x0 | out: lpBuffer=0xe68f3ff710*, lpNumberOfBytesWritten=0xe68f3ff684*=0x10c, lpOverlapped=0x0) returned 1
	[0048.133] CloseHandle (hObject=0x90c) returned 1
	[0048.187] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.191] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 215
	os_tid = 0xca0

	[0048.104] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", dwFileAttributes=0x80) returned 1
	[0048.105] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910
	[0048.105] GetFileSizeEx (in: hFile=0x910, lpFileSize=0xe68f47f548 | out: lpFileSize=0xe68f47f548*=1150) returned 1
	[0048.105] GetFileSizeEx (in: hFile=0x910, lpFileSize=0xe68f47f560 | out: lpFileSize=0xe68f47f560*=1150) returned 1
	[0048.105] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.105] ReadFile (in: hFile=0x910, lpBuffer=0xe68f47f5b0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f47f570, lpOverlapped=0x0 | out: lpBuffer=0xe68f47f5b0*, lpNumberOfBytesRead=0xe68f47f570*=0x19, lpOverlapped=0x0) returned 1
	[0048.191] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.191] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f47f530 | out: phKey=0xe68f47f530*=0x274ba5c0e20) returned 1
	[0048.191] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0048.192] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.192] ReadFile (in: hFile=0x910, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xe68f47f540, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f47f540*=0x47e, lpOverlapped=0x0) returned 1
	[0048.192] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f47f53c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f47f53c*=0xf4250) returned 1
	[0048.192] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f47f538*=0x47e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f47f538*=0x480) returned 1
	[0048.192] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.192] WriteFile (in: hFile=0x910, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xe68f47f540, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f47f540*=0x480, lpOverlapped=0x0) returned 1
	[0048.192] WriteFile (in: hFile=0x910, lpBuffer=0xe68f47f578*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f47f544, lpOverlapped=0x0 | out: lpBuffer=0xe68f47f578*, lpNumberOfBytesWritten=0xe68f47f544*=0x6, lpOverlapped=0x0) returned 1
	[0048.192] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f47f550 | out: pbData=0x0*, pdwDataLen=0xe68f47f550*=0x10c) returned 1
	[0048.192] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f47f5d0, pdwDataLen=0xe68f47f550 | out: pbData=0xe68f47f5d0*, pdwDataLen=0xe68f47f550*=0x10c) returned 1
	[0048.192] WriteFile (in: hFile=0x910, lpBuffer=0xe68f47f5d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f47f544, lpOverlapped=0x0 | out: lpBuffer=0xe68f47f5d0*, lpNumberOfBytesWritten=0xe68f47f544*=0x10c, lpOverlapped=0x0) returned 1
	[0048.192] CloseHandle (hObject=0x910) returned 1
	[0048.218] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.222] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 216
	os_tid = 0xfb0

	[0048.106] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", dwFileAttributes=0x80) returned 1
	[0048.106] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x914
	[0048.106] GetFileSizeEx (in: hFile=0x914, lpFileSize=0xe68f4ff5a8 | out: lpFileSize=0xe68f4ff5a8*=36710) returned 1
	[0048.106] GetFileSizeEx (in: hFile=0x914, lpFileSize=0xe68f4ff5c0 | out: lpFileSize=0xe68f4ff5c0*=36710) returned 1
	[0048.106] SetFilePointerEx (in: hFile=0x914, liDistanceToMove=0x8e44, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.106] ReadFile (in: hFile=0x914, lpBuffer=0xe68f4ff610, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f4ff5d0, lpOverlapped=0x0 | out: lpBuffer=0xe68f4ff610*, lpNumberOfBytesRead=0xe68f4ff5d0*=0x19, lpOverlapped=0x0) returned 1
	[0048.248] SetFilePointer (in: hFile=0x914, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.249] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f4ff590 | out: phKey=0xe68f4ff590*=0x274ba5c16e0) returned 1
	[0048.249] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0048.249] SetFilePointer (in: hFile=0x914, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.249] ReadFile (in: hFile=0x914, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x8f66, lpNumberOfBytesRead=0xe68f4ff5a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f4ff5a0*=0x8f66, lpOverlapped=0x0) returned 1
	[0048.261] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f4ff59c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f4ff59c*=0xf4250) returned 1
	[0048.261] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f4ff598*=0x8f66, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f4ff598*=0x8f70) returned 1
	[0048.261] SetFilePointer (in: hFile=0x914, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.261] WriteFile (in: hFile=0x914, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0xe68f4ff5a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f4ff5a0*=0x8f70, lpOverlapped=0x0) returned 1
	[0048.262] WriteFile (in: hFile=0x914, lpBuffer=0xe68f4ff5d8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f4ff5a4, lpOverlapped=0x0 | out: lpBuffer=0xe68f4ff5d8*, lpNumberOfBytesWritten=0xe68f4ff5a4*=0x6, lpOverlapped=0x0) returned 1
	[0048.262] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f4ff5b0 | out: pbData=0x0*, pdwDataLen=0xe68f4ff5b0*=0x10c) returned 1
	[0048.262] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f4ff630, pdwDataLen=0xe68f4ff5b0 | out: pbData=0xe68f4ff630*, pdwDataLen=0xe68f4ff5b0*=0x10c) returned 1
	[0048.262] WriteFile (in: hFile=0x914, lpBuffer=0xe68f4ff630*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f4ff5a4, lpOverlapped=0x0 | out: lpBuffer=0xe68f4ff630*, lpNumberOfBytesWritten=0xe68f4ff5a4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.262] CloseHandle (hObject=0x914) returned 1
	[0048.278] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.282] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 217
	os_tid = 0xa34

	[0048.107] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", dwFileAttributes=0x80) returned 1
	[0048.107] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x918
	[0048.107] GetFileSizeEx (in: hFile=0x918, lpFileSize=0xe68f57f728 | out: lpFileSize=0xe68f57f728*=10134) returned 1
	[0048.107] GetFileSizeEx (in: hFile=0x918, lpFileSize=0xe68f57f740 | out: lpFileSize=0xe68f57f740*=10134) returned 1
	[0048.107] SetFilePointerEx (in: hFile=0x918, liDistanceToMove=0x2674, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.107] ReadFile (in: hFile=0x918, lpBuffer=0xe68f57f790, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f57f750, lpOverlapped=0x0 | out: lpBuffer=0xe68f57f790*, lpNumberOfBytesRead=0xe68f57f750*=0x19, lpOverlapped=0x0) returned 1
	[0048.250] SetFilePointer (in: hFile=0x918, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.250] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f57f710 | out: phKey=0xe68f57f710*=0x274ba5c0e20) returned 1
	[0048.250] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0048.250] SetFilePointer (in: hFile=0x918, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.250] ReadFile (in: hFile=0x918, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0xe68f57f720, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68f57f720*=0x2796, lpOverlapped=0x0) returned 1
	[0048.340] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f57f71c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f57f71c*=0xf4250) returned 1
	[0048.340] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68f57f718*=0x2796, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68f57f718*=0x27a0) returned 1
	[0048.340] SetFilePointer (in: hFile=0x918, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.340] WriteFile (in: hFile=0x918, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0xe68f57f720, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68f57f720*=0x27a0, lpOverlapped=0x0) returned 1
	[0048.341] WriteFile (in: hFile=0x918, lpBuffer=0xe68f57f758*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f57f724, lpOverlapped=0x0 | out: lpBuffer=0xe68f57f758*, lpNumberOfBytesWritten=0xe68f57f724*=0x6, lpOverlapped=0x0) returned 1
	[0048.341] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f57f730 | out: pbData=0x0*, pdwDataLen=0xe68f57f730*=0x10c) returned 1
	[0048.341] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f57f7b0, pdwDataLen=0xe68f57f730 | out: pbData=0xe68f57f7b0*, pdwDataLen=0xe68f57f730*=0x10c) returned 1
	[0048.341] WriteFile (in: hFile=0x918, lpBuffer=0xe68f57f7b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f57f724, lpOverlapped=0x0 | out: lpBuffer=0xe68f57f7b0*, lpNumberOfBytesWritten=0xe68f57f724*=0x10c, lpOverlapped=0x0) returned 1
	[0048.341] CloseHandle (hObject=0x918) returned 1
	[0048.366] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.370] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 218
	os_tid = 0xfac

	[0048.108] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", dwFileAttributes=0x80) returned 1
	[0048.108] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0048.108] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68f5ffcf8 | out: lpFileSize=0xe68f5ffcf8*=1150) returned 1
	[0048.108] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68f5ffd10 | out: lpFileSize=0xe68f5ffd10*=1150) returned 1
	[0048.108] SetFilePointerEx (in: hFile=0x91c, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.109] ReadFile (in: hFile=0x91c, lpBuffer=0xe68f5ffd60, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f5ffd20, lpOverlapped=0x0 | out: lpBuffer=0xe68f5ffd60*, lpNumberOfBytesRead=0xe68f5ffd20*=0x19, lpOverlapped=0x0) returned 1
	[0048.223] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.223] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f5ffce0 | out: phKey=0xe68f5ffce0*=0x274ba5c16e0) returned 1
	[0048.223] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0048.223] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.223] ReadFile (in: hFile=0x91c, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xe68f5ffcf0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f5ffcf0*=0x47e, lpOverlapped=0x0) returned 1
	[0048.223] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f5ffcec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f5ffcec*=0xf4250) returned 1
	[0048.223] CryptEncrypt (in: hKey=0x274ba5c16e0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f5ffce8*=0x47e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f5ffce8*=0x480) returned 1
	[0048.223] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.223] WriteFile (in: hFile=0x91c, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xe68f5ffcf0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f5ffcf0*=0x480, lpOverlapped=0x0) returned 1
	[0048.224] WriteFile (in: hFile=0x91c, lpBuffer=0xe68f5ffd28*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f5ffcf4, lpOverlapped=0x0 | out: lpBuffer=0xe68f5ffd28*, lpNumberOfBytesWritten=0xe68f5ffcf4*=0x6, lpOverlapped=0x0) returned 1
	[0048.224] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f5ffd00 | out: pbData=0x0*, pdwDataLen=0xe68f5ffd00*=0x10c) returned 1
	[0048.224] CryptExportKey (in: hKey=0x274ba5c16e0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f5ffd80, pdwDataLen=0xe68f5ffd00 | out: pbData=0xe68f5ffd80*, pdwDataLen=0xe68f5ffd00*=0x10c) returned 1
	[0048.224] WriteFile (in: hFile=0x91c, lpBuffer=0xe68f5ffd80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f5ffcf4, lpOverlapped=0x0 | out: lpBuffer=0xe68f5ffd80*, lpNumberOfBytesWritten=0xe68f5ffcf4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.224] CloseHandle (hObject=0x91c) returned 1
	[0048.244] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.248] CryptDestroyKey (hKey=0x274ba5c16e0) returned 1

Thread:
	id = 219
	os_tid = 0xa90

	[0048.110] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", dwFileAttributes=0x80) returned 1
	[0048.110] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x920
	[0048.110] GetFileSizeEx (in: hFile=0x920, lpFileSize=0xe68f67fa68 | out: lpFileSize=0xe68f67fa68*=1150) returned 1
	[0048.110] GetFileSizeEx (in: hFile=0x920, lpFileSize=0xe68f67fa80 | out: lpFileSize=0xe68f67fa80*=1150) returned 1
	[0048.110] SetFilePointerEx (in: hFile=0x920, liDistanceToMove=0x35c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.110] ReadFile (in: hFile=0x920, lpBuffer=0xe68f67fad0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f67fa90, lpOverlapped=0x0 | out: lpBuffer=0xe68f67fad0*, lpNumberOfBytesRead=0xe68f67fa90*=0x19, lpOverlapped=0x0) returned 1
	[0048.111] SetFilePointer (in: hFile=0x920, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.111] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f67fa50 | out: phKey=0xe68f67fa50*=0x274ba5c0e20) returned 1
	[0048.111] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0048.111] SetFilePointer (in: hFile=0x920, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.111] ReadFile (in: hFile=0x920, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x47e, lpNumberOfBytesRead=0xe68f67fa60, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f67fa60*=0x47e, lpOverlapped=0x0) returned 1
	[0048.112] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f67fa5c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f67fa5c*=0xf4250) returned 1
	[0048.112] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f67fa58*=0x47e, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f67fa58*=0x480) returned 1
	[0048.112] SetFilePointer (in: hFile=0x920, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.112] WriteFile (in: hFile=0x920, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0xe68f67fa60, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f67fa60*=0x480, lpOverlapped=0x0) returned 1
	[0048.112] WriteFile (in: hFile=0x920, lpBuffer=0xe68f67fa98*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f67fa64, lpOverlapped=0x0 | out: lpBuffer=0xe68f67fa98*, lpNumberOfBytesWritten=0xe68f67fa64*=0x6, lpOverlapped=0x0) returned 1
	[0048.112] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f67fa70 | out: pbData=0x0*, pdwDataLen=0xe68f67fa70*=0x10c) returned 1
	[0048.112] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f67faf0, pdwDataLen=0xe68f67fa70 | out: pbData=0xe68f67faf0*, pdwDataLen=0xe68f67fa70*=0x10c) returned 1
	[0048.112] WriteFile (in: hFile=0x920, lpBuffer=0xe68f67faf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f67fa64, lpOverlapped=0x0 | out: lpBuffer=0xe68f67faf0*, lpNumberOfBytesWritten=0xe68f67fa64*=0x10c, lpOverlapped=0x0) returned 1
	[0048.112] CloseHandle (hObject=0x920) returned 1
	[0048.128] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.132] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 220
	os_tid = 0x83c

	[0048.111] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", dwFileAttributes=0x80) returned 1
	[0048.251] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0048.251] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68f6ffa08 | out: lpFileSize=0xe68f6ffa08*=10134) returned 1
	[0048.251] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68f6ffa20 | out: lpFileSize=0xe68f6ffa20*=10134) returned 1
	[0048.251] SetFilePointerEx (in: hFile=0x91c, liDistanceToMove=0x2674, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.251] ReadFile (in: hFile=0x91c, lpBuffer=0xe68f6ffa70, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f6ffa30, lpOverlapped=0x0 | out: lpBuffer=0xe68f6ffa70*, lpNumberOfBytesRead=0xe68f6ffa30*=0x19, lpOverlapped=0x0) returned 1
	[0048.370] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.370] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f6ff9f0 | out: phKey=0xe68f6ff9f0*=0x274ba5c0e20) returned 1
	[0048.370] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0048.370] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.370] ReadFile (in: hFile=0x91c, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x2796, lpNumberOfBytesRead=0xe68f6ffa00, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68f6ffa00*=0x2796, lpOverlapped=0x0) returned 1
	[0048.402] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f6ff9fc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f6ff9fc*=0xf4250) returned 1
	[0048.402] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68f6ff9f8*=0x2796, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68f6ff9f8*=0x27a0) returned 1
	[0048.403] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.403] WriteFile (in: hFile=0x91c, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0xe68f6ffa00, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68f6ffa00*=0x27a0, lpOverlapped=0x0) returned 1
	[0048.403] WriteFile (in: hFile=0x91c, lpBuffer=0xe68f6ffa38*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f6ffa04, lpOverlapped=0x0 | out: lpBuffer=0xe68f6ffa38*, lpNumberOfBytesWritten=0xe68f6ffa04*=0x6, lpOverlapped=0x0) returned 1
	[0048.403] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f6ffa10 | out: pbData=0x0*, pdwDataLen=0xe68f6ffa10*=0x10c) returned 1
	[0048.403] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f6ffa90, pdwDataLen=0xe68f6ffa10 | out: pbData=0xe68f6ffa90*, pdwDataLen=0xe68f6ffa10*=0x10c) returned 1
	[0048.404] WriteFile (in: hFile=0x91c, lpBuffer=0xe68f6ffa90*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f6ffa04, lpOverlapped=0x0 | out: lpBuffer=0xe68f6ffa90*, lpNumberOfBytesWritten=0xe68f6ffa04*=0x10c, lpOverlapped=0x0) returned 1
	[0048.404] CloseHandle (hObject=0x91c) returned 1
	[0048.421] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.425] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 221
	os_tid = 0xcfc

	[0048.252] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp", dwFileAttributes=0x80) returned 1
	[0048.253] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910
	[0048.253] GetFileSizeEx (in: hFile=0x910, lpFileSize=0xe68f77fa68 | out: lpFileSize=0xe68f77fa68*=3628) returned 1
	[0048.253] GetFileSizeEx (in: hFile=0x910, lpFileSize=0xe68f77fa80 | out: lpFileSize=0xe68f77fa80*=3628) returned 1
	[0048.253] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0xd0a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.253] ReadFile (in: hFile=0x910, lpBuffer=0xe68f77fad0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f77fa90, lpOverlapped=0x0 | out: lpBuffer=0xe68f77fad0*, lpNumberOfBytesRead=0xe68f77fa90*=0x19, lpOverlapped=0x0) returned 1
	[0048.316] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.316] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f77fa50 | out: phKey=0xe68f77fa50*=0x274ba5c1280) returned 1
	[0048.316] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd590000
	[0048.316] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.316] ReadFile (in: hFile=0x910, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xe2c, lpNumberOfBytesRead=0xe68f77fa60, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f77fa60*=0xe2c, lpOverlapped=0x0) returned 1
	[0048.317] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f77fa5c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f77fa5c*=0xf4250) returned 1
	[0048.317] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f77fa58*=0xe2c, dwBufLen=0xf4250 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f77fa58*=0xe30) returned 1
	[0048.317] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.317] WriteFile (in: hFile=0x910, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0xe68f77fa60, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f77fa60*=0xe30, lpOverlapped=0x0) returned 1
	[0048.317] WriteFile (in: hFile=0x910, lpBuffer=0xe68f77fa98*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f77fa64, lpOverlapped=0x0 | out: lpBuffer=0xe68f77fa98*, lpNumberOfBytesWritten=0xe68f77fa64*=0x6, lpOverlapped=0x0) returned 1
	[0048.317] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f77fa70 | out: pbData=0x0*, pdwDataLen=0xe68f77fa70*=0x10c) returned 1
	[0048.317] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f77faf0, pdwDataLen=0xe68f77fa70 | out: pbData=0xe68f77faf0*, pdwDataLen=0xe68f77fa70*=0x10c) returned 1
	[0048.317] WriteFile (in: hFile=0x910, lpBuffer=0xe68f77faf0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f77fa64, lpOverlapped=0x0 | out: lpBuffer=0xe68f77faf0*, lpNumberOfBytesWritten=0xe68f77fa64*=0x10c, lpOverlapped=0x0) returned 1
	[0048.317] CloseHandle (hObject=0x910) returned 1
	[0048.336] VirtualFree (lpAddress=0x274bd590000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.340] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 222
	os_tid = 0x754

	[0048.254] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz", dwFileAttributes=0x80) returned 1
	[0048.254] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x90c
	[0048.254] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0xe68f7ff918 | out: lpFileSize=0xe68f7ff918*=181483595) returned 1
	[0048.254] GetFileSizeEx (in: hFile=0x90c, lpFileSize=0xe68f7ff930 | out: lpFileSize=0xe68f7ff930*=181483595) returned 1
	[0048.254] SetFilePointerEx (in: hFile=0x90c, liDistanceToMove=0xad13729, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.254] ReadFile (in: hFile=0x90c, lpBuffer=0xe68f7ff980, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f7ff940, lpOverlapped=0x0 | out: lpBuffer=0xe68f7ff980*, lpNumberOfBytesRead=0xe68f7ff940*=0x19, lpOverlapped=0x0) returned 1
	[0048.283] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.283] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f7ff900 | out: phKey=0xe68f7ff900*=0x274ba5c0e90) returned 1
	[0048.283] SetFilePointer (in: hFile=0x90c, lDistanceToMove=38000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x243d580
	[0048.283] ReadFile (in: hFile=0x90c, lpBuffer=0xe68f7ff970, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xe68f7ff940, lpOverlapped=0x0 | out: lpBuffer=0xe68f7ff970*, lpNumberOfBytesRead=0xe68f7ff940*=0x10, lpOverlapped=0x0) returned 1
	[0048.371] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.371] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd590000
	[0048.371] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.371] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.430] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0048.430] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0048.431] SetFilePointer (in: hFile=0x90c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.431] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.433] SetFilePointer (in: hFile=0x90c, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.434] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.480] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0048.480] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0048.481] SetFilePointer (in: hFile=0x90c, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.481] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.066] SetFilePointer (in: hFile=0x90c, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480
	[0049.066] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.157] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.157] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0049.159] SetFilePointer (in: hFile=0x90c, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480
	[0049.159] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.171] SetFilePointer (in: hFile=0x90c, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0
	[0049.171] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.184] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.184] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0049.185] SetFilePointer (in: hFile=0x90c, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0
	[0049.185] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.346] SetFilePointer (in: hFile=0x90c, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900
	[0049.346] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.361] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.361] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0049.362] SetFilePointer (in: hFile=0x90c, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900
	[0049.362] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.485] SetFilePointer (in: hFile=0x90c, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40
	[0049.485] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.498] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.498] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0049.499] SetFilePointer (in: hFile=0x90c, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40
	[0049.500] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.511] SetFilePointer (in: hFile=0x90c, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80
	[0049.512] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.647] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.647] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0049.648] SetFilePointer (in: hFile=0x90c, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80
	[0049.648] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.651] SetFilePointer (in: hFile=0x90c, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0
	[0049.651] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.664] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.664] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0049.665] SetFilePointer (in: hFile=0x90c, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0
	[0049.665] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.670] SetFilePointer (in: hFile=0x90c, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200
	[0049.670] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.683] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0049.683] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0050.185] SetFilePointer (in: hFile=0x90c, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200
	[0050.186] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.189] SetFilePointer (in: hFile=0x90c, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440
	[0050.189] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.200] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0050.200] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0050.201] SetFilePointer (in: hFile=0x90c, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440
	[0050.201] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.205] SetFilePointer (in: hFile=0x90c, lDistanceToMove=10000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x989680
	[0050.205] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.217] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0050.217] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0050.218] SetFilePointer (in: hFile=0x90c, lDistanceToMove=10000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x989680
	[0050.218] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.616] SetFilePointer (in: hFile=0x90c, lDistanceToMove=11000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa7d8c0
	[0050.616] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.627] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0050.627] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0050.628] SetFilePointer (in: hFile=0x90c, lDistanceToMove=11000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xa7d8c0
	[0050.628] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.632] SetFilePointer (in: hFile=0x90c, lDistanceToMove=12000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb71b00
	[0050.632] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.647] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0050.647] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0050.648] SetFilePointer (in: hFile=0x90c, lDistanceToMove=12000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xb71b00
	[0050.648] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.652] SetFilePointer (in: hFile=0x90c, lDistanceToMove=13000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc65d40
	[0050.652] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.007] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0051.007] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0051.008] SetFilePointer (in: hFile=0x90c, lDistanceToMove=13000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xc65d40
	[0051.008] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.010] SetFilePointer (in: hFile=0x90c, lDistanceToMove=14000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xd59f80
	[0051.011] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.029] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0051.029] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0051.030] SetFilePointer (in: hFile=0x90c, lDistanceToMove=14000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xd59f80
	[0051.030] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.335] SetFilePointer (in: hFile=0x90c, lDistanceToMove=15000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe4e1c0
	[0051.335] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.361] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0051.361] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0051.367] SetFilePointer (in: hFile=0x90c, lDistanceToMove=15000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xe4e1c0
	[0051.367] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.374] SetFilePointer (in: hFile=0x90c, lDistanceToMove=16000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf42400
	[0051.374] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.646] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0051.646] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0051.647] SetFilePointer (in: hFile=0x90c, lDistanceToMove=16000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf42400
	[0051.647] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.651] SetFilePointer (in: hFile=0x90c, lDistanceToMove=17000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1036640
	[0051.651] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0051.667] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0051.667] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0051.668] SetFilePointer (in: hFile=0x90c, lDistanceToMove=17000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1036640
	[0051.668] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.054] SetFilePointer (in: hFile=0x90c, lDistanceToMove=18000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x112a880
	[0052.054] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.063] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.063] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.064] SetFilePointer (in: hFile=0x90c, lDistanceToMove=18000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x112a880
	[0052.064] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.077] SetFilePointer (in: hFile=0x90c, lDistanceToMove=19000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x121eac0
	[0052.077] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.457] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.457] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.458] SetFilePointer (in: hFile=0x90c, lDistanceToMove=19000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x121eac0
	[0052.458] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.467] SetFilePointer (in: hFile=0x90c, lDistanceToMove=20000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1312d00
	[0052.467] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.475] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.475] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.476] SetFilePointer (in: hFile=0x90c, lDistanceToMove=20000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1312d00
	[0052.476] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.488] SetFilePointer (in: hFile=0x90c, lDistanceToMove=21000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1406f40
	[0052.488] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.490] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.490] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.491] SetFilePointer (in: hFile=0x90c, lDistanceToMove=21000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1406f40
	[0052.491] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.493] SetFilePointer (in: hFile=0x90c, lDistanceToMove=22000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x14fb180
	[0052.493] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.501] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.501] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.502] SetFilePointer (in: hFile=0x90c, lDistanceToMove=22000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x14fb180
	[0052.502] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.711] SetFilePointer (in: hFile=0x90c, lDistanceToMove=23000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15ef3c0
	[0052.711] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.729] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.729] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.730] SetFilePointer (in: hFile=0x90c, lDistanceToMove=23000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x15ef3c0
	[0052.731] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.734] SetFilePointer (in: hFile=0x90c, lDistanceToMove=24000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16e3600
	[0052.734] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.747] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0052.747] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0052.748] SetFilePointer (in: hFile=0x90c, lDistanceToMove=24000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x16e3600
	[0052.748] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0052.752] SetFilePointer (in: hFile=0x90c, lDistanceToMove=25000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x17d7840
	[0052.752] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.174] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.174] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.175] SetFilePointer (in: hFile=0x90c, lDistanceToMove=25000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x17d7840
	[0053.175] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.177] SetFilePointer (in: hFile=0x90c, lDistanceToMove=26000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x18cba80
	[0053.177] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.193] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.193] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.194] SetFilePointer (in: hFile=0x90c, lDistanceToMove=26000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x18cba80
	[0053.194] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.198] SetFilePointer (in: hFile=0x90c, lDistanceToMove=27000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x19bfcc0
	[0053.198] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.413] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.413] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.414] SetFilePointer (in: hFile=0x90c, lDistanceToMove=27000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x19bfcc0
	[0053.414] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.418] SetFilePointer (in: hFile=0x90c, lDistanceToMove=28000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ab3f00
	[0053.418] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.432] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.432] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.433] SetFilePointer (in: hFile=0x90c, lDistanceToMove=28000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ab3f00
	[0053.433] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.436] SetFilePointer (in: hFile=0x90c, lDistanceToMove=29000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ba8140
	[0053.436] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.452] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.452] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.563] SetFilePointer (in: hFile=0x90c, lDistanceToMove=29000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1ba8140
	[0053.563] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.570] SetFilePointer (in: hFile=0x90c, lDistanceToMove=30000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1c9c380
	[0053.570] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.583] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.583] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.584] SetFilePointer (in: hFile=0x90c, lDistanceToMove=30000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1c9c380
	[0053.584] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.587] SetFilePointer (in: hFile=0x90c, lDistanceToMove=31000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d905c0
	[0053.587] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.600] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.600] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.601] SetFilePointer (in: hFile=0x90c, lDistanceToMove=31000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1d905c0
	[0053.601] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.604] SetFilePointer (in: hFile=0x90c, lDistanceToMove=32000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e84800
	[0053.604] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.713] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.713] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.714] SetFilePointer (in: hFile=0x90c, lDistanceToMove=32000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e84800
	[0053.714] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.718] SetFilePointer (in: hFile=0x90c, lDistanceToMove=33000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1f78a40
	[0053.718] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.733] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0053.733] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0053.734] SetFilePointer (in: hFile=0x90c, lDistanceToMove=33000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1f78a40
	[0053.734] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0053.739] SetFilePointer (in: hFile=0x90c, lDistanceToMove=34000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x206cc80
	[0053.739] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.025] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0054.025] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0054.026] SetFilePointer (in: hFile=0x90c, lDistanceToMove=34000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x206cc80
	[0054.026] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.028] SetFilePointer (in: hFile=0x90c, lDistanceToMove=35000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2160ec0
	[0054.028] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.043] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0054.043] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0054.048] SetFilePointer (in: hFile=0x90c, lDistanceToMove=35000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2160ec0
	[0054.048] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.052] SetFilePointer (in: hFile=0x90c, lDistanceToMove=36000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2255100
	[0054.052] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.186] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0054.186] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0054.187] SetFilePointer (in: hFile=0x90c, lDistanceToMove=36000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2255100
	[0054.187] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.189] SetFilePointer (in: hFile=0x90c, lDistanceToMove=37000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2349340
	[0054.189] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.208] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240) returned 1
	[0054.208] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0xf4240) returned 1
	[0054.209] SetFilePointer (in: hFile=0x90c, lDistanceToMove=37000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2349340
	[0054.209] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0xf4240, lpOverlapped=0x0) returned 1
	[0054.214] SetFilePointer (in: hFile=0x90c, lDistanceToMove=38000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x243d580
	[0054.214] ReadFile (in: hFile=0x90c, lpBuffer=0x274bd590000, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesRead=0xe68f7ff910*=0x0, lpOverlapped=0x0) returned 1
	[0054.214] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f7ff90c*=0xf4250) returned 1
	[0054.214] CryptEncrypt (in: hKey=0x274ba5c0e90, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0x0, dwBufLen=0xf4250 | out: pbData=0x274bd590000*, pdwDataLen=0xe68f7ff908*=0x10) returned 1
	[0054.214] SetFilePointer (in: hFile=0x90c, lDistanceToMove=38000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x243d580
	[0054.214] WriteFile (in: hFile=0x90c, lpBuffer=0x274bd590000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xe68f7ff910, lpOverlapped=0x0 | out: lpBuffer=0x274bd590000*, lpNumberOfBytesWritten=0xe68f7ff910*=0x10, lpOverlapped=0x0) returned 1
	[0054.214] SetFilePointerEx (in: hFile=0x90c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1
	[0054.214] WriteFile (in: hFile=0x90c, lpBuffer=0xe68f7ff948*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0xe68f7ff914, lpOverlapped=0x0 | out: lpBuffer=0xe68f7ff948*, lpNumberOfBytesWritten=0xe68f7ff914*=0xb, lpOverlapped=0x0) returned 1
	[0054.214] CryptExportKey (in: hKey=0x274ba5c0e90, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f7ff920 | out: pbData=0x0*, pdwDataLen=0xe68f7ff920*=0x10c) returned 1
	[0054.214] CryptExportKey (in: hKey=0x274ba5c0e90, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f7ff9a0, pdwDataLen=0xe68f7ff920 | out: pbData=0xe68f7ff9a0*, pdwDataLen=0xe68f7ff920*=0x10c) returned 1
	[0054.215] WriteFile (in: hFile=0x90c, lpBuffer=0xe68f7ff9a0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f7ff914, lpOverlapped=0x0 | out: lpBuffer=0xe68f7ff9a0*, lpNumberOfBytesWritten=0xe68f7ff914*=0x10c, lpOverlapped=0x0) returned 1
	[0054.215] SetFilePointerEx (in: hFile=0x90c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1
	[0054.215] WriteFile (in: hFile=0x90c, lpBuffer=0xe68f7ff970*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xe68f7ff940, lpOverlapped=0x0 | out: lpBuffer=0xe68f7ff970*, lpNumberOfBytesWritten=0xe68f7ff940*=0x10, lpOverlapped=0x0) returned 1
	[0054.215] CloseHandle (hObject=0x90c) returned 1
	[0055.242] VirtualFree (lpAddress=0x274bd590000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0055.248] CryptDestroyKey (hKey=0x274ba5c0e90) returned 1

Thread:
	id = 223
	os_tid = 0xeb0

	[0048.258] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", dwFileAttributes=0x80) returned 1
	[0048.258] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x920
	[0048.258] GetFileSizeEx (in: hFile=0x920, lpFileSize=0xe68f87f5d8 | out: lpFileSize=0xe68f87f5d8*=1901056) returned 1
	[0048.258] GetFileSizeEx (in: hFile=0x920, lpFileSize=0xe68f87f5f0 | out: lpFileSize=0xe68f87f5f0*=1901056) returned 1
	[0048.258] SetFilePointerEx (in: hFile=0x920, liDistanceToMove=0x1d00de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.259] ReadFile (in: hFile=0x920, lpBuffer=0xe68f87f640, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f87f600, lpOverlapped=0x0 | out: lpBuffer=0xe68f87f640*, lpNumberOfBytesRead=0xe68f87f600*=0x19, lpOverlapped=0x0) returned 1
	[0048.302] SetFilePointer (in: hFile=0x920, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.302] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f87f5c0 | out: phKey=0xe68f87f5c0*=0x274ba5c1210) returned 1
	[0048.302] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0048.302] SetFilePointer (in: hFile=0x920, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.302] ReadFile (in: hFile=0x920, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f87f5d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68f87f5d0*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.398] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f87f5cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f87f5cc*=0xf4240) returned 1
	[0048.398] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68f87f5c8*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd490000*, pdwDataLen=0xe68f87f5c8*=0xf4240) returned 1
	[0048.399] SetFilePointer (in: hFile=0x920, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.399] WriteFile (in: hFile=0x920, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f87f5d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68f87f5d0*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.401] SetFilePointer (in: hFile=0x920, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.401] ReadFile (in: hFile=0x920, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xdbfc0, lpNumberOfBytesRead=0xe68f87f5d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe68f87f5d0*=0xdbfc0, lpOverlapped=0x0) returned 1
	[0048.464] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f87f5cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f87f5cc*=0xf4250) returned 1
	[0048.464] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe68f87f5c8*=0xdbfc0, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe68f87f5c8*=0xdbfd0) returned 1
	[0048.465] SetFilePointer (in: hFile=0x920, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.465] WriteFile (in: hFile=0x920, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xdbfd0, lpNumberOfBytesWritten=0xe68f87f5d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe68f87f5d0*=0xdbfd0, lpOverlapped=0x0) returned 1
	[0048.468] WriteFile (in: hFile=0x920, lpBuffer=0xe68f87f608*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f87f5d4, lpOverlapped=0x0 | out: lpBuffer=0xe68f87f608*, lpNumberOfBytesWritten=0xe68f87f5d4*=0x6, lpOverlapped=0x0) returned 1
	[0048.468] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f87f5e0 | out: pbData=0x0*, pdwDataLen=0xe68f87f5e0*=0x10c) returned 1
	[0048.468] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f87f660, pdwDataLen=0xe68f87f5e0 | out: pbData=0xe68f87f660*, pdwDataLen=0xe68f87f5e0*=0x10c) returned 1
	[0049.023] WriteFile (in: hFile=0x920, lpBuffer=0xe68f87f660*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f87f5d4, lpOverlapped=0x0 | out: lpBuffer=0xe68f87f660*, lpNumberOfBytesWritten=0xe68f87f5d4*=0x10c, lpOverlapped=0x0) returned 1
	[0049.023] CloseHandle (hObject=0x920) returned 1
	[0049.333] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.338] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 224
	os_tid = 0xbec

	[0048.259] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", dwFileAttributes=0x80) returned 1
	[0048.260] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924
	[0048.260] GetFileSizeEx (in: hFile=0x924, lpFileSize=0xe68f8ff628 | out: lpFileSize=0xe68f8ff628*=1163264) returned 1
	[0048.260] GetFileSizeEx (in: hFile=0x924, lpFileSize=0xe68f8ff640 | out: lpFileSize=0xe68f8ff640*=1163264) returned 1
	[0048.260] SetFilePointerEx (in: hFile=0x924, liDistanceToMove=0x11bede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.260] ReadFile (in: hFile=0x924, lpBuffer=0xe68f8ff690, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f8ff650, lpOverlapped=0x0 | out: lpBuffer=0xe68f8ff690*, lpNumberOfBytesRead=0xe68f8ff650*=0x19, lpOverlapped=0x0) returned 1
	[0048.284] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.284] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f8ff610 | out: phKey=0xe68f8ff610*=0x274ba5c1130) returned 1
	[0048.284] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0048.284] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.284] ReadFile (in: hFile=0x924, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f8ff620, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f8ff620*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.388] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f8ff61c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f8ff61c*=0xf4240) returned 1
	[0048.388] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f8ff618*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f8ff618*=0xf4240) returned 1
	[0048.389] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.389] WriteFile (in: hFile=0x924, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f8ff620, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f8ff620*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.392] SetFilePointer (in: hFile=0x924, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.392] ReadFile (in: hFile=0x924, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x27dc0, lpNumberOfBytesRead=0xe68f8ff620, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe68f8ff620*=0x27dc0, lpOverlapped=0x0) returned 1
	[0048.435] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f8ff61c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f8ff61c*=0xf4250) returned 1
	[0048.435] CryptEncrypt (in: hKey=0x274ba5c1130, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe68f8ff618*=0x27dc0, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe68f8ff618*=0x27dd0) returned 1
	[0048.436] SetFilePointer (in: hFile=0x924, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.436] WriteFile (in: hFile=0x924, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x27dd0, lpNumberOfBytesWritten=0xe68f8ff620, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe68f8ff620*=0x27dd0, lpOverlapped=0x0) returned 1
	[0048.437] WriteFile (in: hFile=0x924, lpBuffer=0xe68f8ff658*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f8ff624, lpOverlapped=0x0 | out: lpBuffer=0xe68f8ff658*, lpNumberOfBytesWritten=0xe68f8ff624*=0x6, lpOverlapped=0x0) returned 1
	[0048.437] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f8ff630 | out: pbData=0x0*, pdwDataLen=0xe68f8ff630*=0x10c) returned 1
	[0048.437] CryptExportKey (in: hKey=0x274ba5c1130, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f8ff6b0, pdwDataLen=0xe68f8ff630 | out: pbData=0xe68f8ff6b0*, pdwDataLen=0xe68f8ff630*=0x10c) returned 1
	[0048.437] WriteFile (in: hFile=0x924, lpBuffer=0xe68f8ff6b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f8ff624, lpOverlapped=0x0 | out: lpBuffer=0xe68f8ff6b0*, lpNumberOfBytesWritten=0xe68f8ff624*=0x10c, lpOverlapped=0x0) returned 1
	[0048.437] CloseHandle (hObject=0x924) returned 1
	[0048.452] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.021] CryptDestroyKey (hKey=0x274ba5c1130) returned 1

Thread:
	id = 225
	os_tid = 0xd14

	[0048.484] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz", dwFileAttributes=0x80) returned 1
	[0048.485] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x924
	[0048.485] GetFileSizeEx (in: hFile=0x924, lpFileSize=0xe68f97f748 | out: lpFileSize=0xe68f97f748*=43131591) returned 1
	[0048.485] GetFileSizeEx (in: hFile=0x924, lpFileSize=0xe68f97f760 | out: lpFileSize=0xe68f97f760*=43131591) returned 1
	[0048.485] SetFilePointerEx (in: hFile=0x924, liDistanceToMove=0x29221a5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.485] ReadFile (in: hFile=0x924, lpBuffer=0xe68f97f7b0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f97f770, lpOverlapped=0x0 | out: lpBuffer=0xe68f97f7b0*, lpNumberOfBytesRead=0xe68f97f770*=0x19, lpOverlapped=0x0) returned 1
	[0048.486] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.486] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f97f730 | out: phKey=0xe68f97f730*=0x274ba5c0e20) returned 1
	[0048.486] SetFilePointer (in: hFile=0x924, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440
	[0048.486] ReadFile (in: hFile=0x924, lpBuffer=0xe68f97f7a0, nNumberOfBytesToRead=0x10, lpNumberOfBytesRead=0xe68f97f770, lpOverlapped=0x0 | out: lpBuffer=0xe68f97f7a0*, lpNumberOfBytesRead=0xe68f97f770*=0x10, lpOverlapped=0x0) returned 1
	[0048.500] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.500] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd690000
	[0048.500] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.500] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.545] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0048.545] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0048.546] SetFilePointer (in: hFile=0x924, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.546] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0048.548] SetFilePointer (in: hFile=0x924, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0048.548] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.068] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0049.068] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0049.070] SetFilePointer (in: hFile=0x924, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0049.070] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.073] SetFilePointer (in: hFile=0x924, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480
	[0049.073] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.288] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0049.288] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0049.289] SetFilePointer (in: hFile=0x924, lDistanceToMove=2000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1e8480
	[0049.289] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.292] SetFilePointer (in: hFile=0x924, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0
	[0049.292] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.543] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0049.543] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0049.544] SetFilePointer (in: hFile=0x924, lDistanceToMove=3000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x2dc6c0
	[0049.545] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.547] SetFilePointer (in: hFile=0x924, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900
	[0049.547] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.688] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0049.688] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0049.689] SetFilePointer (in: hFile=0x924, lDistanceToMove=4000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x3d0900
	[0049.689] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.693] SetFilePointer (in: hFile=0x924, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40
	[0049.693] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.713] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0049.713] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0049.714] SetFilePointer (in: hFile=0x924, lDistanceToMove=5000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x4c4b40
	[0049.714] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.717] SetFilePointer (in: hFile=0x924, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80
	[0049.717] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.224] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0050.224] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0050.225] SetFilePointer (in: hFile=0x924, lDistanceToMove=6000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5b8d80
	[0050.225] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.229] SetFilePointer (in: hFile=0x924, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0
	[0050.229] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.698] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0050.698] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0050.699] SetFilePointer (in: hFile=0x924, lDistanceToMove=7000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x6acfc0
	[0050.699] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.703] SetFilePointer (in: hFile=0x924, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200
	[0050.703] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.717] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240) returned 1
	[0050.717] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0xf4240) returned 1
	[0050.718] SetFilePointer (in: hFile=0x924, lDistanceToMove=8000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x7a1200
	[0050.718] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0xf4240, lpOverlapped=0x0) returned 1
	[0050.722] SetFilePointer (in: hFile=0x924, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440
	[0050.723] ReadFile (in: hFile=0x924, lpBuffer=0x274bd690000, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesRead=0xe68f97f740*=0x0, lpOverlapped=0x0) returned 1
	[0050.723] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f97f73c*=0xf4250) returned 1
	[0050.723] CryptEncrypt (in: hKey=0x274ba5c0e20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0x0, dwBufLen=0xf4250 | out: pbData=0x274bd690000*, pdwDataLen=0xe68f97f738*=0x10) returned 1
	[0050.723] SetFilePointer (in: hFile=0x924, lDistanceToMove=9000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x895440
	[0050.723] WriteFile (in: hFile=0x924, lpBuffer=0x274bd690000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xe68f97f740, lpOverlapped=0x0 | out: lpBuffer=0x274bd690000*, lpNumberOfBytesWritten=0xe68f97f740*=0x10, lpOverlapped=0x0) returned 1
	[0050.723] SetFilePointerEx (in: hFile=0x924, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1
	[0050.723] WriteFile (in: hFile=0x924, lpBuffer=0xe68f97f778*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0xe68f97f744, lpOverlapped=0x0 | out: lpBuffer=0xe68f97f778*, lpNumberOfBytesWritten=0xe68f97f744*=0xa, lpOverlapped=0x0) returned 1
	[0051.590] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f97f750 | out: pbData=0x0*, pdwDataLen=0xe68f97f750*=0x10c) returned 1
	[0051.590] CryptExportKey (in: hKey=0x274ba5c0e20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f97f7d0, pdwDataLen=0xe68f97f750 | out: pbData=0xe68f97f7d0*, pdwDataLen=0xe68f97f750*=0x10c) returned 1
	[0051.590] WriteFile (in: hFile=0x924, lpBuffer=0xe68f97f7d0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f97f744, lpOverlapped=0x0 | out: lpBuffer=0xe68f97f7d0*, lpNumberOfBytesWritten=0xe68f97f744*=0x10c, lpOverlapped=0x0) returned 1
	[0051.590] SetFilePointerEx (in: hFile=0x924, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2 | out: lpNewFilePointer=0x0) returned 1
	[0051.590] WriteFile (in: hFile=0x924, lpBuffer=0xe68f97f7a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0xe68f97f770, lpOverlapped=0x0 | out: lpBuffer=0xe68f97f7a0*, lpNumberOfBytesWritten=0xe68f97f770*=0x10, lpOverlapped=0x0) returned 1
	[0051.590] CloseHandle (hObject=0x924) returned 1
	[0053.394] VirtualFree (lpAddress=0x274bd690000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0053.398] CryptDestroyKey (hKey=0x274ba5c0e20) returned 1

Thread:
	id = 226
	os_tid = 0x824

	[0048.487] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", dwFileAttributes=0x80) returned 1
	[0048.488] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0048.488] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68f9ff5f8 | out: lpFileSize=0xe68f9ff5f8*=872448) returned 1
	[0048.488] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68f9ff610 | out: lpFileSize=0xe68f9ff610*=872448) returned 1
	[0048.488] SetFilePointerEx (in: hFile=0x91c, liDistanceToMove=0xd4ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.488] ReadFile (in: hFile=0x91c, lpBuffer=0xe68f9ff660, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68f9ff620, lpOverlapped=0x0 | out: lpBuffer=0xe68f9ff660*, lpNumberOfBytesRead=0xe68f9ff620*=0x19, lpOverlapped=0x0) returned 1
	[0048.490] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.490] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68f9ff5e0 | out: phKey=0xe68f9ff5e0*=0x274ba5c1280) returned 1
	[0048.490] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0048.490] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.490] ReadFile (in: hFile=0x91c, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xd5000, lpNumberOfBytesRead=0xe68f9ff5f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68f9ff5f0*=0xd5000, lpOverlapped=0x0) returned 1
	[0048.518] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68f9ff5ec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68f9ff5ec*=0xf4250) returned 1
	[0048.518] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68f9ff5e8*=0xd5000, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68f9ff5e8*=0xd5010) returned 1
	[0048.519] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.519] WriteFile (in: hFile=0x91c, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0xe68f9ff5f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68f9ff5f0*=0xd5010, lpOverlapped=0x0) returned 1
	[0048.521] WriteFile (in: hFile=0x91c, lpBuffer=0xe68f9ff628*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68f9ff5f4, lpOverlapped=0x0 | out: lpBuffer=0xe68f9ff628*, lpNumberOfBytesWritten=0xe68f9ff5f4*=0x6, lpOverlapped=0x0) returned 1
	[0048.521] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68f9ff600 | out: pbData=0x0*, pdwDataLen=0xe68f9ff600*=0x10c) returned 1
	[0048.521] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68f9ff680, pdwDataLen=0xe68f9ff600 | out: pbData=0xe68f9ff680*, pdwDataLen=0xe68f9ff600*=0x10c) returned 1
	[0048.521] WriteFile (in: hFile=0x91c, lpBuffer=0xe68f9ff680*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68f9ff5f4, lpOverlapped=0x0 | out: lpBuffer=0xe68f9ff680*, lpNumberOfBytesWritten=0xe68f9ff5f4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.521] CloseHandle (hObject=0x91c) returned 1
	[0048.536] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.540] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 227
	os_tid = 0xd20

	[0048.513] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", dwFileAttributes=0x80) returned 1
	[0048.513] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x918
	[0048.514] GetFileSizeEx (in: hFile=0x918, lpFileSize=0xe68fa7f638 | out: lpFileSize=0xe68fa7f638*=495616) returned 1
	[0048.514] GetFileSizeEx (in: hFile=0x918, lpFileSize=0xe68fa7f650 | out: lpFileSize=0xe68fa7f650*=495616) returned 1
	[0048.514] SetFilePointerEx (in: hFile=0x918, liDistanceToMove=0x78ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.514] ReadFile (in: hFile=0x918, lpBuffer=0xe68fa7f6a0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fa7f660, lpOverlapped=0x0 | out: lpBuffer=0xe68fa7f6a0*, lpNumberOfBytesRead=0xe68fa7f660*=0x19, lpOverlapped=0x0) returned 1
	[0048.562] SetFilePointer (in: hFile=0x918, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.562] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fa7f620 | out: phKey=0xe68fa7f620*=0x274ba5c1280) returned 1
	[0048.562] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0048.562] SetFilePointer (in: hFile=0x918, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.562] ReadFile (in: hFile=0x918, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x79000, lpNumberOfBytesRead=0xe68fa7f630, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe68fa7f630*=0x79000, lpOverlapped=0x0) returned 1
	[0048.604] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fa7f62c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fa7f62c*=0xf4250) returned 1
	[0048.604] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe68fa7f628*=0x79000, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe68fa7f628*=0x79010) returned 1
	[0048.605] SetFilePointer (in: hFile=0x918, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.605] WriteFile (in: hFile=0x918, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0xe68fa7f630, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe68fa7f630*=0x79010, lpOverlapped=0x0) returned 1
	[0048.606] WriteFile (in: hFile=0x918, lpBuffer=0xe68fa7f668*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fa7f634, lpOverlapped=0x0 | out: lpBuffer=0xe68fa7f668*, lpNumberOfBytesWritten=0xe68fa7f634*=0x6, lpOverlapped=0x0) returned 1
	[0048.606] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fa7f640 | out: pbData=0x0*, pdwDataLen=0xe68fa7f640*=0x10c) returned 1
	[0048.606] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fa7f6c0, pdwDataLen=0xe68fa7f640 | out: pbData=0xe68fa7f6c0*, pdwDataLen=0xe68fa7f640*=0x10c) returned 1
	[0048.607] WriteFile (in: hFile=0x918, lpBuffer=0xe68fa7f6c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fa7f634, lpOverlapped=0x0 | out: lpBuffer=0xe68fa7f6c0*, lpNumberOfBytesWritten=0xe68fa7f634*=0x10c, lpOverlapped=0x0) returned 1
	[0048.607] CloseHandle (hObject=0x918) returned 1
	[0049.088] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.092] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 228
	os_tid = 0xd28

	[0048.550] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", dwFileAttributes=0x80) returned 1
	[0048.592] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x91c
	[0048.592] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68faffa28 | out: lpFileSize=0xe68faffa28*=272046) returned 1
	[0048.592] GetFileSizeEx (in: hFile=0x91c, lpFileSize=0xe68faffa40 | out: lpFileSize=0xe68faffa40*=272046) returned 1
	[0048.592] SetFilePointerEx (in: hFile=0x91c, liDistanceToMove=0x4258c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.592] ReadFile (in: hFile=0x91c, lpBuffer=0xe68faffa90, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68faffa50, lpOverlapped=0x0 | out: lpBuffer=0xe68faffa90*, lpNumberOfBytesRead=0xe68faffa50*=0x19, lpOverlapped=0x0) returned 1
	[0048.633] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.634] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68faffa10 | out: phKey=0xe68faffa10*=0x274ba5c1910) returned 1
	[0048.634] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd790000
	[0048.634] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.634] ReadFile (in: hFile=0x91c, lpBuffer=0x274bd790000, nNumberOfBytesToRead=0x426ae, lpNumberOfBytesRead=0xe68faffa20, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesRead=0xe68faffa20*=0x426ae, lpOverlapped=0x0) returned 1
	[0048.647] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68faffa1c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68faffa1c*=0xf4250) returned 1
	[0048.647] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd790000*, pdwDataLen=0xe68faffa18*=0x426ae, dwBufLen=0xf4250 | out: pbData=0x274bd790000*, pdwDataLen=0xe68faffa18*=0x426b0) returned 1
	[0048.647] SetFilePointer (in: hFile=0x91c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.647] WriteFile (in: hFile=0x91c, lpBuffer=0x274bd790000*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0xe68faffa20, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesWritten=0xe68faffa20*=0x426b0, lpOverlapped=0x0) returned 1
	[0048.648] WriteFile (in: hFile=0x91c, lpBuffer=0xe68faffa58*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68faffa24, lpOverlapped=0x0 | out: lpBuffer=0xe68faffa58*, lpNumberOfBytesWritten=0xe68faffa24*=0x6, lpOverlapped=0x0) returned 1
	[0048.648] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68faffa30 | out: pbData=0x0*, pdwDataLen=0xe68faffa30*=0x10c) returned 1
	[0048.648] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68faffab0, pdwDataLen=0xe68faffa30 | out: pbData=0xe68faffab0*, pdwDataLen=0xe68faffa30*=0x10c) returned 1
	[0048.648] WriteFile (in: hFile=0x91c, lpBuffer=0xe68faffab0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68faffa24, lpOverlapped=0x0 | out: lpBuffer=0xe68faffab0*, lpNumberOfBytesWritten=0xe68faffa24*=0x10c, lpOverlapped=0x0) returned 1
	[0048.648] CloseHandle (hObject=0x91c) returned 1
	[0048.664] VirtualFree (lpAddress=0x274bd790000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.668] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 229
	os_tid = 0x8e8

	[0048.593] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", dwFileAttributes=0x80) returned 1
	[0048.593] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x910
	[0048.594] GetFileSizeEx (in: hFile=0x910, lpFileSize=0xe68fb7f8c8 | out: lpFileSize=0xe68fb7f8c8*=184832) returned 1
	[0048.594] GetFileSizeEx (in: hFile=0x910, lpFileSize=0xe68fb7f8e0 | out: lpFileSize=0xe68fb7f8e0*=184832) returned 1
	[0048.594] SetFilePointerEx (in: hFile=0x910, liDistanceToMove=0x2d0de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.594] ReadFile (in: hFile=0x910, lpBuffer=0xe68fb7f930, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fb7f8f0, lpOverlapped=0x0 | out: lpBuffer=0xe68fb7f930*, lpNumberOfBytesRead=0xe68fb7f8f0*=0x19, lpOverlapped=0x0) returned 1
	[0048.641] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.642] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fb7f8b0 | out: phKey=0xe68fb7f8b0*=0x274ba5c1980) returned 1
	[0048.642] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bda90000
	[0048.642] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.642] ReadFile (in: hFile=0x910, lpBuffer=0x274bda90000, nNumberOfBytesToRead=0x2d200, lpNumberOfBytesRead=0xe68fb7f8c0, lpOverlapped=0x0 | out: lpBuffer=0x274bda90000*, lpNumberOfBytesRead=0xe68fb7f8c0*=0x2d200, lpOverlapped=0x0) returned 1
	[0048.669] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fb7f8bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fb7f8bc*=0xf4250) returned 1
	[0048.669] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bda90000*, pdwDataLen=0xe68fb7f8b8*=0x2d200, dwBufLen=0xf4250 | out: pbData=0x274bda90000*, pdwDataLen=0xe68fb7f8b8*=0x2d210) returned 1
	[0048.669] SetFilePointer (in: hFile=0x910, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.669] WriteFile (in: hFile=0x910, lpBuffer=0x274bda90000*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0xe68fb7f8c0, lpOverlapped=0x0 | out: lpBuffer=0x274bda90000*, lpNumberOfBytesWritten=0xe68fb7f8c0*=0x2d210, lpOverlapped=0x0) returned 1
	[0048.670] WriteFile (in: hFile=0x910, lpBuffer=0xe68fb7f8f8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fb7f8c4, lpOverlapped=0x0 | out: lpBuffer=0xe68fb7f8f8*, lpNumberOfBytesWritten=0xe68fb7f8c4*=0x6, lpOverlapped=0x0) returned 1
	[0048.670] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fb7f8d0 | out: pbData=0x0*, pdwDataLen=0xe68fb7f8d0*=0x10c) returned 1
	[0048.670] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fb7f950, pdwDataLen=0xe68fb7f8d0 | out: pbData=0xe68fb7f950*, pdwDataLen=0xe68fb7f8d0*=0x10c) returned 1
	[0048.670] WriteFile (in: hFile=0x910, lpBuffer=0xe68fb7f950*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fb7f8c4, lpOverlapped=0x0 | out: lpBuffer=0xe68fb7f950*, lpNumberOfBytesWritten=0xe68fb7f8c4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.670] CloseHandle (hObject=0x910) returned 1
	[0048.686] VirtualFree (lpAddress=0x274bda90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.691] CryptDestroyKey (hKey=0x274ba5c1980) returned 1

Thread:
	id = 230
	os_tid = 0x1004

	[0048.595] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", dwFileAttributes=0x80) returned 1
	[0048.595] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x914
	[0048.595] GetFileSizeEx (in: hFile=0x914, lpFileSize=0xe68fbff9a8 | out: lpFileSize=0xe68fbff9a8*=94720) returned 1
	[0048.595] GetFileSizeEx (in: hFile=0x914, lpFileSize=0xe68fbff9c0 | out: lpFileSize=0xe68fbff9c0*=94720) returned 1
	[0048.595] SetFilePointerEx (in: hFile=0x914, liDistanceToMove=0x170de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.595] ReadFile (in: hFile=0x914, lpBuffer=0xe68fbffa10, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fbff9d0, lpOverlapped=0x0 | out: lpBuffer=0xe68fbffa10*, lpNumberOfBytesRead=0xe68fbff9d0*=0x19, lpOverlapped=0x0) returned 1
	[0048.638] SetFilePointer (in: hFile=0x914, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.638] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fbff990 | out: phKey=0xe68fbff990*=0x274ba5c1b40) returned 1
	[0048.638] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd890000
	[0048.638] SetFilePointer (in: hFile=0x914, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.638] ReadFile (in: hFile=0x914, lpBuffer=0x274bd890000, nNumberOfBytesToRead=0x17200, lpNumberOfBytesRead=0xe68fbff9a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd890000*, lpNumberOfBytesRead=0xe68fbff9a0*=0x17200, lpOverlapped=0x0) returned 1
	[0048.717] CryptEncrypt (in: hKey=0x274ba5c1b40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fbff99c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fbff99c*=0xf4250) returned 1
	[0048.717] CryptEncrypt (in: hKey=0x274ba5c1b40, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd890000*, pdwDataLen=0xe68fbff998*=0x17200, dwBufLen=0xf4250 | out: pbData=0x274bd890000*, pdwDataLen=0xe68fbff998*=0x17210) returned 1
	[0048.717] SetFilePointer (in: hFile=0x914, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.717] WriteFile (in: hFile=0x914, lpBuffer=0x274bd890000*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0xe68fbff9a0, lpOverlapped=0x0 | out: lpBuffer=0x274bd890000*, lpNumberOfBytesWritten=0xe68fbff9a0*=0x17210, lpOverlapped=0x0) returned 1
	[0048.718] WriteFile (in: hFile=0x914, lpBuffer=0xe68fbff9d8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fbff9a4, lpOverlapped=0x0 | out: lpBuffer=0xe68fbff9d8*, lpNumberOfBytesWritten=0xe68fbff9a4*=0x6, lpOverlapped=0x0) returned 1
	[0048.718] CryptExportKey (in: hKey=0x274ba5c1b40, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fbff9b0 | out: pbData=0x0*, pdwDataLen=0xe68fbff9b0*=0x10c) returned 1
	[0048.718] CryptExportKey (in: hKey=0x274ba5c1b40, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fbffa30, pdwDataLen=0xe68fbff9b0 | out: pbData=0xe68fbffa30*, pdwDataLen=0xe68fbff9b0*=0x10c) returned 1
	[0048.718] WriteFile (in: hFile=0x914, lpBuffer=0xe68fbffa30*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fbff9a4, lpOverlapped=0x0 | out: lpBuffer=0xe68fbffa30*, lpNumberOfBytesWritten=0xe68fbff9a4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.718] CloseHandle (hObject=0x914) returned 1
	[0048.740] VirtualFree (lpAddress=0x274bd890000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.744] CryptDestroyKey (hKey=0x274ba5c1b40) returned 1

Thread:
	id = 231
	os_tid = 0x1008

	[0048.596] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", dwFileAttributes=0x80) returned 1
	[0048.596] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x928
	[0048.596] GetFileSizeEx (in: hFile=0x928, lpFileSize=0xe68fc7f5c8 | out: lpFileSize=0xe68fc7f5c8*=30120) returned 1
	[0048.596] GetFileSizeEx (in: hFile=0x928, lpFileSize=0xe68fc7f5e0 | out: lpFileSize=0xe68fc7f5e0*=30120) returned 1
	[0048.596] SetFilePointerEx (in: hFile=0x928, liDistanceToMove=0x7486, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.596] ReadFile (in: hFile=0x928, lpBuffer=0xe68fc7f630, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fc7f5f0, lpOverlapped=0x0 | out: lpBuffer=0xe68fc7f630*, lpNumberOfBytesRead=0xe68fc7f5f0*=0x19, lpOverlapped=0x0) returned 1
	[0048.691] SetFilePointer (in: hFile=0x928, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.691] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fc7f5b0 | out: phKey=0xe68fc7f5b0*=0x274ba5c1910) returned 1
	[0048.691] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd790000
	[0048.692] SetFilePointer (in: hFile=0x928, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.692] ReadFile (in: hFile=0x928, lpBuffer=0x274bd790000, nNumberOfBytesToRead=0x75a8, lpNumberOfBytesRead=0xe68fc7f5c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesRead=0xe68fc7f5c0*=0x75a8, lpOverlapped=0x0) returned 1
	[0048.745] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fc7f5bc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fc7f5bc*=0xf4250) returned 1
	[0048.745] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd790000*, pdwDataLen=0xe68fc7f5b8*=0x75a8, dwBufLen=0xf4250 | out: pbData=0x274bd790000*, pdwDataLen=0xe68fc7f5b8*=0x75b0) returned 1
	[0048.745] SetFilePointer (in: hFile=0x928, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.745] WriteFile (in: hFile=0x928, lpBuffer=0x274bd790000*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0xe68fc7f5c0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesWritten=0xe68fc7f5c0*=0x75b0, lpOverlapped=0x0) returned 1
	[0048.745] WriteFile (in: hFile=0x928, lpBuffer=0xe68fc7f5f8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fc7f5c4, lpOverlapped=0x0 | out: lpBuffer=0xe68fc7f5f8*, lpNumberOfBytesWritten=0xe68fc7f5c4*=0x6, lpOverlapped=0x0) returned 1
	[0048.745] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fc7f5d0 | out: pbData=0x0*, pdwDataLen=0xe68fc7f5d0*=0x10c) returned 1
	[0048.745] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fc7f650, pdwDataLen=0xe68fc7f5d0 | out: pbData=0xe68fc7f650*, pdwDataLen=0xe68fc7f5d0*=0x10c) returned 1
	[0048.745] WriteFile (in: hFile=0x928, lpBuffer=0xe68fc7f650*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fc7f5c4, lpOverlapped=0x0 | out: lpBuffer=0xe68fc7f650*, lpNumberOfBytesWritten=0xe68fc7f5c4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.745] CloseHandle (hObject=0x928) returned 1
	[0048.762] VirtualFree (lpAddress=0x274bd790000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.766] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 232
	os_tid = 0x100c

	[0048.598] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", dwFileAttributes=0x80) returned 1
	[0048.598] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x92c
	[0048.598] GetFileSizeEx (in: hFile=0x92c, lpFileSize=0xe68fcffbb8 | out: lpFileSize=0xe68fcffbb8*=41080) returned 1
	[0048.598] GetFileSizeEx (in: hFile=0x92c, lpFileSize=0xe68fcffbd0 | out: lpFileSize=0xe68fcffbd0*=41080) returned 1
	[0048.598] SetFilePointerEx (in: hFile=0x92c, liDistanceToMove=0x9f56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.598] ReadFile (in: hFile=0x92c, lpBuffer=0xe68fcffc20, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fcffbe0, lpOverlapped=0x0 | out: lpBuffer=0xe68fcffc20*, lpNumberOfBytesRead=0xe68fcffbe0*=0x19, lpOverlapped=0x0) returned 1
	[0048.640] SetFilePointer (in: hFile=0x92c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.640] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fcffba0 | out: phKey=0xe68fcffba0*=0x274ba5c1c20) returned 1
	[0048.640] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd990000
	[0048.640] SetFilePointer (in: hFile=0x92c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.640] ReadFile (in: hFile=0x92c, lpBuffer=0x274bd990000, nNumberOfBytesToRead=0xa078, lpNumberOfBytesRead=0xe68fcffbb0, lpOverlapped=0x0 | out: lpBuffer=0x274bd990000*, lpNumberOfBytesRead=0xe68fcffbb0*=0xa078, lpOverlapped=0x0) returned 1
	[0048.692] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fcffbac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fcffbac*=0xf4250) returned 1
	[0048.692] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd990000*, pdwDataLen=0xe68fcffba8*=0xa078, dwBufLen=0xf4250 | out: pbData=0x274bd990000*, pdwDataLen=0xe68fcffba8*=0xa080) returned 1
	[0048.693] SetFilePointer (in: hFile=0x92c, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.693] WriteFile (in: hFile=0x92c, lpBuffer=0x274bd990000*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0xe68fcffbb0, lpOverlapped=0x0 | out: lpBuffer=0x274bd990000*, lpNumberOfBytesWritten=0xe68fcffbb0*=0xa080, lpOverlapped=0x0) returned 1
	[0048.693] WriteFile (in: hFile=0x92c, lpBuffer=0xe68fcffbe8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fcffbb4, lpOverlapped=0x0 | out: lpBuffer=0xe68fcffbe8*, lpNumberOfBytesWritten=0xe68fcffbb4*=0x6, lpOverlapped=0x0) returned 1
	[0048.693] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fcffbc0 | out: pbData=0x0*, pdwDataLen=0xe68fcffbc0*=0x10c) returned 1
	[0048.693] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fcffc40, pdwDataLen=0xe68fcffbc0 | out: pbData=0xe68fcffc40*, pdwDataLen=0xe68fcffbc0*=0x10c) returned 1
	[0048.693] WriteFile (in: hFile=0x92c, lpBuffer=0xe68fcffc40*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fcffbb4, lpOverlapped=0x0 | out: lpBuffer=0xe68fcffc40*, lpNumberOfBytesWritten=0xe68fcffbb4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.693] CloseHandle (hObject=0x92c) returned 1
	[0048.710] VirtualFree (lpAddress=0x274bd990000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.714] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 233
	os_tid = 0x1010

	[0048.599] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml", dwFileAttributes=0x80) returned 1
	[0048.599] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x930
	[0048.599] GetFileSizeEx (in: hFile=0x930, lpFileSize=0xe68fd7f9d8 | out: lpFileSize=0xe68fd7f9d8*=14084) returned 1
	[0048.599] GetFileSizeEx (in: hFile=0x930, lpFileSize=0xe68fd7f9f0 | out: lpFileSize=0xe68fd7f9f0*=14084) returned 1
	[0048.599] SetFilePointerEx (in: hFile=0x930, liDistanceToMove=0x35e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.599] ReadFile (in: hFile=0x930, lpBuffer=0xe68fd7fa40, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fd7fa00, lpOverlapped=0x0 | out: lpBuffer=0xe68fd7fa40*, lpNumberOfBytesRead=0xe68fd7fa00*=0x19, lpOverlapped=0x0) returned 1
	[0048.609] SetFilePointer (in: hFile=0x930, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.609] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fd7f9c0 | out: phKey=0xe68fd7f9c0*=0x274ba5c1c20) returned 1
	[0048.609] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd790000
	[0048.609] SetFilePointer (in: hFile=0x930, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.609] ReadFile (in: hFile=0x930, lpBuffer=0x274bd790000, nNumberOfBytesToRead=0x3704, lpNumberOfBytesRead=0xe68fd7f9d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesRead=0xe68fd7f9d0*=0x3704, lpOverlapped=0x0) returned 1
	[0048.610] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fd7f9cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fd7f9cc*=0xf4250) returned 1
	[0048.610] CryptEncrypt (in: hKey=0x274ba5c1c20, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd790000*, pdwDataLen=0xe68fd7f9c8*=0x3704, dwBufLen=0xf4250 | out: pbData=0x274bd790000*, pdwDataLen=0xe68fd7f9c8*=0x3710) returned 1
	[0048.610] SetFilePointer (in: hFile=0x930, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.610] WriteFile (in: hFile=0x930, lpBuffer=0x274bd790000*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0xe68fd7f9d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesWritten=0xe68fd7f9d0*=0x3710, lpOverlapped=0x0) returned 1
	[0048.610] WriteFile (in: hFile=0x930, lpBuffer=0xe68fd7fa08*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fd7f9d4, lpOverlapped=0x0 | out: lpBuffer=0xe68fd7fa08*, lpNumberOfBytesWritten=0xe68fd7f9d4*=0x6, lpOverlapped=0x0) returned 1
	[0048.610] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fd7f9e0 | out: pbData=0x0*, pdwDataLen=0xe68fd7f9e0*=0x10c) returned 1
	[0048.610] CryptExportKey (in: hKey=0x274ba5c1c20, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fd7fa60, pdwDataLen=0xe68fd7f9e0 | out: pbData=0xe68fd7fa60*, pdwDataLen=0xe68fd7f9e0*=0x10c) returned 1
	[0048.610] WriteFile (in: hFile=0x930, lpBuffer=0xe68fd7fa60*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fd7f9d4, lpOverlapped=0x0 | out: lpBuffer=0xe68fd7fa60*, lpNumberOfBytesWritten=0xe68fd7f9d4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.610] CloseHandle (hObject=0x930) returned 1
	[0048.629] VirtualFree (lpAddress=0x274bd790000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.633] CryptDestroyKey (hKey=0x274ba5c1c20) returned 1

Thread:
	id = 234
	os_tid = 0x1014

	[0048.600] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", dwFileAttributes=0x80) returned 1
	[0048.601] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x934
	[0048.601] GetFileSizeEx (in: hFile=0x934, lpFileSize=0xe68fdff538 | out: lpFileSize=0xe68fdff538*=38898) returned 1
	[0048.601] GetFileSizeEx (in: hFile=0x934, lpFileSize=0xe68fdff550 | out: lpFileSize=0xe68fdff550*=38898) returned 1
	[0048.601] SetFilePointerEx (in: hFile=0x934, liDistanceToMove=0x96d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.601] ReadFile (in: hFile=0x934, lpBuffer=0xe68fdff5a0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fdff560, lpOverlapped=0x0 | out: lpBuffer=0xe68fdff5a0*, lpNumberOfBytesRead=0xe68fdff560*=0x19, lpOverlapped=0x0) returned 1
	[0048.716] SetFilePointer (in: hFile=0x934, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.716] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fdff520 | out: phKey=0xe68fdff520*=0x274ba5c19f0) returned 1
	[0048.716] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bda90000
	[0048.716] SetFilePointer (in: hFile=0x934, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.716] ReadFile (in: hFile=0x934, lpBuffer=0x274bda90000, nNumberOfBytesToRead=0x97f2, lpNumberOfBytesRead=0xe68fdff530, lpOverlapped=0x0 | out: lpBuffer=0x274bda90000*, lpNumberOfBytesRead=0xe68fdff530*=0x97f2, lpOverlapped=0x0) returned 1
	[0048.793] CryptEncrypt (in: hKey=0x274ba5c19f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fdff52c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fdff52c*=0xf4250) returned 1
	[0048.793] CryptEncrypt (in: hKey=0x274ba5c19f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bda90000*, pdwDataLen=0xe68fdff528*=0x97f2, dwBufLen=0xf4250 | out: pbData=0x274bda90000*, pdwDataLen=0xe68fdff528*=0x9800) returned 1
	[0048.793] SetFilePointer (in: hFile=0x934, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.793] WriteFile (in: hFile=0x934, lpBuffer=0x274bda90000*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0xe68fdff530, lpOverlapped=0x0 | out: lpBuffer=0x274bda90000*, lpNumberOfBytesWritten=0xe68fdff530*=0x9800, lpOverlapped=0x0) returned 1
	[0048.794] WriteFile (in: hFile=0x934, lpBuffer=0xe68fdff568*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fdff534, lpOverlapped=0x0 | out: lpBuffer=0xe68fdff568*, lpNumberOfBytesWritten=0xe68fdff534*=0x6, lpOverlapped=0x0) returned 1
	[0048.794] CryptExportKey (in: hKey=0x274ba5c19f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fdff540 | out: pbData=0x0*, pdwDataLen=0xe68fdff540*=0x10c) returned 1
	[0048.794] CryptExportKey (in: hKey=0x274ba5c19f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fdff5c0, pdwDataLen=0xe68fdff540 | out: pbData=0xe68fdff5c0*, pdwDataLen=0xe68fdff540*=0x10c) returned 1
	[0048.794] WriteFile (in: hFile=0x934, lpBuffer=0xe68fdff5c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fdff534, lpOverlapped=0x0 | out: lpBuffer=0xe68fdff5c0*, lpNumberOfBytesWritten=0xe68fdff534*=0x10c, lpOverlapped=0x0) returned 1
	[0048.794] CloseHandle (hObject=0x934) returned 1
	[0048.868] VirtualFree (lpAddress=0x274bda90000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.872] CryptDestroyKey (hKey=0x274ba5c19f0) returned 1

Thread:
	id = 235
	os_tid = 0x1018

	[0048.602] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", dwFileAttributes=0x80) returned 1
	[0048.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x938
	[0048.645] GetFileSizeEx (in: hFile=0x938, lpFileSize=0xe68fe7f9f8 | out: lpFileSize=0xe68fe7f9f8*=104072) returned 1
	[0048.645] GetFileSizeEx (in: hFile=0x938, lpFileSize=0xe68fe7fa10 | out: lpFileSize=0xe68fe7fa10*=104072) returned 1
	[0048.645] SetFilePointerEx (in: hFile=0x938, liDistanceToMove=0x19566, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0048.645] ReadFile (in: hFile=0x938, lpBuffer=0xe68fe7fa60, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe68fe7fa20, lpOverlapped=0x0 | out: lpBuffer=0xe68fe7fa60*, lpNumberOfBytesRead=0xe68fe7fa20*=0x19, lpOverlapped=0x0) returned 1
	[0048.714] SetFilePointer (in: hFile=0x938, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.714] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe68fe7f9e0 | out: phKey=0xe68fe7f9e0*=0x274ba5c1980) returned 1
	[0048.714] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd990000
	[0048.715] SetFilePointer (in: hFile=0x938, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.715] ReadFile (in: hFile=0x938, lpBuffer=0x274bd990000, nNumberOfBytesToRead=0x19688, lpNumberOfBytesRead=0xe68fe7f9f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd990000*, lpNumberOfBytesRead=0xe68fe7f9f0*=0x19688, lpOverlapped=0x0) returned 1
	[0048.767] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe68fe7f9ec*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe68fe7f9ec*=0xf4250) returned 1
	[0048.767] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd990000*, pdwDataLen=0xe68fe7f9e8*=0x19688, dwBufLen=0xf4250 | out: pbData=0x274bd990000*, pdwDataLen=0xe68fe7f9e8*=0x19690) returned 1
	[0048.767] SetFilePointer (in: hFile=0x938, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0048.768] WriteFile (in: hFile=0x938, lpBuffer=0x274bd990000*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0xe68fe7f9f0, lpOverlapped=0x0 | out: lpBuffer=0x274bd990000*, lpNumberOfBytesWritten=0xe68fe7f9f0*=0x19690, lpOverlapped=0x0) returned 1
	[0048.768] WriteFile (in: hFile=0x938, lpBuffer=0xe68fe7fa28*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe68fe7f9f4, lpOverlapped=0x0 | out: lpBuffer=0xe68fe7fa28*, lpNumberOfBytesWritten=0xe68fe7f9f4*=0x6, lpOverlapped=0x0) returned 1
	[0048.768] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe68fe7fa00 | out: pbData=0x0*, pdwDataLen=0xe68fe7fa00*=0x10c) returned 1
	[0048.768] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe68fe7fa80, pdwDataLen=0xe68fe7fa00 | out: pbData=0xe68fe7fa80*, pdwDataLen=0xe68fe7fa00*=0x10c) returned 1
	[0048.768] WriteFile (in: hFile=0x938, lpBuffer=0xe68fe7fa80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe68fe7f9f4, lpOverlapped=0x0 | out: lpBuffer=0xe68fe7fa80*, lpNumberOfBytesWritten=0xe68fe7f9f4*=0x10c, lpOverlapped=0x0) returned 1
	[0048.768] CloseHandle (hObject=0x938) returned 1
	[0048.788] VirtualFree (lpAddress=0x274bd990000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0048.793] CryptDestroyKey (hKey=0x274ba5c1980) returned 1

Thread:
	id = 236
	os_tid = 0x101c

	[0048.646] SetFileAttributesW (lpFileName="C:\\Boot\\BCD", dwFileAttributes=0x80) returned 0
	[0048.872] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.872] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 237
	os_tid = 0x1020

	[0048.873] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG", dwFileAttributes=0x80) returned 0
	[0048.873] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.873] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 238
	os_tid = 0x1024

	[0048.873] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG1", dwFileAttributes=0x80) returned 0
	[0048.874] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 239
	os_tid = 0x1028

	[0048.874] SetFileAttributesW (lpFileName="C:\\Boot\\BCD.LOG2", dwFileAttributes=0x80) returned 0
	[0048.874] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 240
	os_tid = 0x102c

	[0048.875] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT", dwFileAttributes=0x80) returned 0
	[0048.876] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0048.876] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 253
	os_tid = 0x1034

	[0049.093] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.126] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 254
	os_tid = 0x1038

	[0049.094] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.253] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.253] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 255
	os_tid = 0x103c

	[0049.095] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.257] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.257] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 256
	os_tid = 0x1040

	[0049.096] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.260] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.260] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 257
	os_tid = 0x1044

	[0049.098] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.238] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgunn_boot.ttf" (normalized: "c:\\boot\\fonts\\malgunn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 258
	os_tid = 0x1048

	[0049.099] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.318] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 259
	os_tid = 0x104c

	[0049.100] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.250] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryon_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryon_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.250] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 260
	os_tid = 0x1050

	[0049.102] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.195] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 261
	os_tid = 0x1054

	[0049.102] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.103] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.103] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 262
	os_tid = 0x1058

	[0049.103] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.188] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 263
	os_tid = 0x105c

	[0049.103] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.187] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 264
	os_tid = 0x1060

	[0049.104] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.192] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 265
	os_tid = 0x1064

	[0049.104] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.191] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 266
	os_tid = 0x1068

	[0049.104] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf", dwFileAttributes=0x80) returned 0
	[0049.190] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoen_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoen_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 267
	os_tid = 0x106c

	[0049.105] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf", dwFileAttributes=0x80) returned 0
	[0049.190] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segoe_slboot.ttf" (normalized: "c:\\boot\\fonts\\segoe_slboot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 268
	os_tid = 0x1070

	[0049.105] SetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf", dwFileAttributes=0x80) returned 0
	[0049.189] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 270
	os_tid = 0x1078

	[0049.515] SetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b", dwFileAttributes=0x80) returned 0
	[0049.534] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.534] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 271
	os_tid = 0x107c

	[0049.516] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x80) returned 0
	[0049.517] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.517] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 272
	os_tid = 0x1080

	[0049.518] SetFileAttributesW (lpFileName="C:\\BOOTNXT", dwFileAttributes=0x80) returned 0
	[0049.533] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.533] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 273
	os_tid = 0x1084

	[0049.519] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x80) returned 0
	[0049.519] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.519] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 274
	os_tid = 0x1088

	[0049.520] SetFileAttributesW (lpFileName="C:\\hiberfil.sys", dwFileAttributes=0x80) returned 0
	[0049.520] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 277
	os_tid = 0x1098

	[0049.740] SetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx", dwFileAttributes=0x80) returned 1
	[0049.781] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9cc
	[0049.782] GetFileSizeEx (in: hFile=0x9cc, lpFileSize=0xe690bff828 | out: lpFileSize=0xe690bff828*=69632) returned 1
	[0049.782] GetFileSizeEx (in: hFile=0x9cc, lpFileSize=0xe690bff840 | out: lpFileSize=0xe690bff840*=69632) returned 1
	[0049.782] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x10ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0049.782] ReadFile (in: hFile=0x9cc, lpBuffer=0xe690bff890, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690bff850, lpOverlapped=0x0 | out: lpBuffer=0xe690bff890*, lpNumberOfBytesRead=0xe690bff850*=0x19, lpOverlapped=0x0) returned 1
	[0050.031] SetFilePointer (in: hFile=0x9cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.031] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690bff810 | out: phKey=0xe690bff810*=0x274ba5c1910) returned 1
	[0050.031] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0050.031] SetFilePointer (in: hFile=0x9cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.031] ReadFile (in: hFile=0x9cc, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0xe690bff820, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe690bff820*=0x11000, lpOverlapped=0x0) returned 1
	[0050.074] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690bff81c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690bff81c*=0xf4250) returned 1
	[0050.074] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe690bff818*=0x11000, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe690bff818*=0x11010) returned 1
	[0050.074] SetFilePointer (in: hFile=0x9cc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.074] WriteFile (in: hFile=0x9cc, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0xe690bff820, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe690bff820*=0x11010, lpOverlapped=0x0) returned 1
	[0050.075] WriteFile (in: hFile=0x9cc, lpBuffer=0xe690bff858*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690bff824, lpOverlapped=0x0 | out: lpBuffer=0xe690bff858*, lpNumberOfBytesWritten=0xe690bff824*=0x6, lpOverlapped=0x0) returned 1
	[0050.075] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690bff830 | out: pbData=0x0*, pdwDataLen=0xe690bff830*=0x10c) returned 1
	[0050.075] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690bff8b0, pdwDataLen=0xe690bff830 | out: pbData=0xe690bff8b0*, pdwDataLen=0xe690bff830*=0x10c) returned 1
	[0050.075] WriteFile (in: hFile=0x9cc, lpBuffer=0xe690bff8b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690bff824, lpOverlapped=0x0 | out: lpBuffer=0xe690bff8b0*, lpNumberOfBytesWritten=0xe690bff824*=0x10c, lpOverlapped=0x0) returned 1
	[0050.075] CloseHandle (hObject=0x9cc) returned 1
	[0050.092] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.096] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 278
	os_tid = 0x109c

	[0049.742] SetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx", dwFileAttributes=0x80) returned 1
	[0049.780] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c8
	[0049.780] GetFileSizeEx (in: hFile=0x9c8, lpFileSize=0xe690c7f9e8 | out: lpFileSize=0xe690c7f9e8*=69632) returned 1
	[0049.781] GetFileSizeEx (in: hFile=0x9c8, lpFileSize=0xe690c7fa00 | out: lpFileSize=0xe690c7fa00*=69632) returned 1
	[0049.781] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x10ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0049.781] ReadFile (in: hFile=0x9c8, lpBuffer=0xe690c7fa50, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690c7fa10, lpOverlapped=0x0 | out: lpBuffer=0xe690c7fa50*, lpNumberOfBytesRead=0xe690c7fa10*=0x19, lpOverlapped=0x0) returned 1
	[0049.824] SetFilePointer (in: hFile=0x9c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.824] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690c7f9d0 | out: phKey=0xe690c7f9d0*=0x274ba5c1980) returned 1
	[0049.824] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd790000
	[0049.914] SetFilePointer (in: hFile=0x9c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.914] ReadFile (in: hFile=0x9c8, lpBuffer=0x274bd790000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0xe690c7f9e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesRead=0xe690c7f9e0*=0x11000, lpOverlapped=0x0) returned 1
	[0049.951] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690c7f9dc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690c7f9dc*=0xf4250) returned 1
	[0049.951] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd790000*, pdwDataLen=0xe690c7f9d8*=0x11000, dwBufLen=0xf4250 | out: pbData=0x274bd790000*, pdwDataLen=0xe690c7f9d8*=0x11010) returned 1
	[0049.951] SetFilePointer (in: hFile=0x9c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.951] WriteFile (in: hFile=0x9c8, lpBuffer=0x274bd790000*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0xe690c7f9e0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesWritten=0xe690c7f9e0*=0x11010, lpOverlapped=0x0) returned 1
	[0049.952] WriteFile (in: hFile=0x9c8, lpBuffer=0xe690c7fa18*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690c7f9e4, lpOverlapped=0x0 | out: lpBuffer=0xe690c7fa18*, lpNumberOfBytesWritten=0xe690c7f9e4*=0x6, lpOverlapped=0x0) returned 1
	[0049.952] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690c7f9f0 | out: pbData=0x0*, pdwDataLen=0xe690c7f9f0*=0x10c) returned 1
	[0049.952] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690c7fa70, pdwDataLen=0xe690c7f9f0 | out: pbData=0xe690c7fa70*, pdwDataLen=0xe690c7f9f0*=0x10c) returned 1
	[0049.952] WriteFile (in: hFile=0x9c8, lpBuffer=0xe690c7fa70*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690c7f9e4, lpOverlapped=0x0 | out: lpBuffer=0xe690c7fa70*, lpNumberOfBytesWritten=0xe690c7f9e4*=0x10c, lpOverlapped=0x0) returned 1
	[0049.952] CloseHandle (hObject=0x9c8) returned 1
	[0050.004] VirtualFree (lpAddress=0x274bd790000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.008] CryptDestroyKey (hKey=0x274ba5c1980) returned 1

Thread:
	id = 279
	os_tid = 0x10a0

	[0049.742] SetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx", dwFileAttributes=0x80) returned 1
	[0050.029] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d0
	[0050.030] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0xe690cff7d8 | out: lpFileSize=0xe690cff7d8*=69632) returned 1
	[0050.030] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0xe690cff7f0 | out: lpFileSize=0xe690cff7f0*=69632) returned 1
	[0050.030] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x10ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0050.030] ReadFile (in: hFile=0x9d0, lpBuffer=0xe690cff840, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690cff800, lpOverlapped=0x0 | out: lpBuffer=0xe690cff840*, lpNumberOfBytesRead=0xe690cff800*=0x19, lpOverlapped=0x0) returned 1
	[0050.042] SetFilePointer (in: hFile=0x9d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.042] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690cff7c0 | out: phKey=0xe690cff7c0*=0x274ba5c1980) returned 1
	[0050.042] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd790000
	[0050.043] SetFilePointer (in: hFile=0x9d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.043] ReadFile (in: hFile=0x9d0, lpBuffer=0x274bd790000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0xe690cff7d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesRead=0xe690cff7d0*=0x11000, lpOverlapped=0x0) returned 1
	[0050.051] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690cff7cc*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690cff7cc*=0xf4250) returned 1
	[0050.051] CryptEncrypt (in: hKey=0x274ba5c1980, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd790000*, pdwDataLen=0xe690cff7c8*=0x11000, dwBufLen=0xf4250 | out: pbData=0x274bd790000*, pdwDataLen=0xe690cff7c8*=0x11010) returned 1
	[0050.052] SetFilePointer (in: hFile=0x9d0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.052] WriteFile (in: hFile=0x9d0, lpBuffer=0x274bd790000*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0xe690cff7d0, lpOverlapped=0x0 | out: lpBuffer=0x274bd790000*, lpNumberOfBytesWritten=0xe690cff7d0*=0x11010, lpOverlapped=0x0) returned 1
	[0050.052] WriteFile (in: hFile=0x9d0, lpBuffer=0xe690cff808*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690cff7d4, lpOverlapped=0x0 | out: lpBuffer=0xe690cff808*, lpNumberOfBytesWritten=0xe690cff7d4*=0x6, lpOverlapped=0x0) returned 1
	[0050.052] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690cff7e0 | out: pbData=0x0*, pdwDataLen=0xe690cff7e0*=0x10c) returned 1
	[0050.052] CryptExportKey (in: hKey=0x274ba5c1980, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690cff860, pdwDataLen=0xe690cff7e0 | out: pbData=0xe690cff860*, pdwDataLen=0xe690cff7e0*=0x10c) returned 1
	[0050.052] WriteFile (in: hFile=0x9d0, lpBuffer=0xe690cff860*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690cff7d4, lpOverlapped=0x0 | out: lpBuffer=0xe690cff860*, lpNumberOfBytesWritten=0xe690cff7d4*=0x10c, lpOverlapped=0x0) returned 1
	[0050.052] CloseHandle (hObject=0x9d0) returned 1
	[0050.069] VirtualFree (lpAddress=0x274bd790000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.073] CryptDestroyKey (hKey=0x274ba5c1980) returned 1

Thread:
	id = 280
	os_tid = 0x10a4

	[0049.743] SetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx", dwFileAttributes=0x80) returned 1
	[0050.284] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9d4
	[0050.284] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0xe690d7f858 | out: lpFileSize=0xe690d7f858*=69632) returned 1
	[0050.284] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0xe690d7f870 | out: lpFileSize=0xe690d7f870*=69632) returned 1
	[0050.285] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x10ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0050.285] ReadFile (in: hFile=0x9d4, lpBuffer=0xe690d7f8c0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690d7f880, lpOverlapped=0x0 | out: lpBuffer=0xe690d7f8c0*, lpNumberOfBytesRead=0xe690d7f880*=0x19, lpOverlapped=0x0) returned 1
	[0050.337] SetFilePointer (in: hFile=0x9d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.337] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690d7f840 | out: phKey=0xe690d7f840*=0x274ba5c1910) returned 1
	[0050.337] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0050.337] SetFilePointer (in: hFile=0x9d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.338] ReadFile (in: hFile=0x9d4, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0xe690d7f850, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe690d7f850*=0x11000, lpOverlapped=0x0) returned 1
	[0050.356] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690d7f84c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690d7f84c*=0xf4250) returned 1
	[0050.356] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe690d7f848*=0x11000, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe690d7f848*=0x11010) returned 1
	[0050.356] SetFilePointer (in: hFile=0x9d4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0050.356] WriteFile (in: hFile=0x9d4, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0xe690d7f850, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe690d7f850*=0x11010, lpOverlapped=0x0) returned 1
	[0050.357] WriteFile (in: hFile=0x9d4, lpBuffer=0xe690d7f888*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690d7f854, lpOverlapped=0x0 | out: lpBuffer=0xe690d7f888*, lpNumberOfBytesWritten=0xe690d7f854*=0x6, lpOverlapped=0x0) returned 1
	[0050.357] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690d7f860 | out: pbData=0x0*, pdwDataLen=0xe690d7f860*=0x10c) returned 1
	[0050.357] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690d7f8e0, pdwDataLen=0xe690d7f860 | out: pbData=0xe690d7f8e0*, pdwDataLen=0xe690d7f860*=0x10c) returned 1
	[0050.357] WriteFile (in: hFile=0x9d4, lpBuffer=0xe690d7f8e0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690d7f854, lpOverlapped=0x0 | out: lpBuffer=0xe690d7f8e0*, lpNumberOfBytesWritten=0xe690d7f854*=0x10c, lpOverlapped=0x0) returned 1
	[0050.357] CloseHandle (hObject=0x9d4) returned 1
	[0050.374] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.378] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 281
	os_tid = 0x10a8

	[0049.743] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx", dwFileAttributes=0x80) returned 1
	[0049.773] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9b8
	[0049.773] GetFileSizeEx (in: hFile=0x9b8, lpFileSize=0xe690dff7b8 | out: lpFileSize=0xe690dff7b8*=69632) returned 1
	[0049.773] GetFileSizeEx (in: hFile=0x9b8, lpFileSize=0xe690dff7d0 | out: lpFileSize=0xe690dff7d0*=69632) returned 1
	[0049.773] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x10ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0049.773] ReadFile (in: hFile=0x9b8, lpBuffer=0xe690dff820, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690dff7e0, lpOverlapped=0x0 | out: lpBuffer=0xe690dff820*, lpNumberOfBytesRead=0xe690dff7e0*=0x19, lpOverlapped=0x0) returned 1
	[0049.783] SetFilePointer (in: hFile=0x9b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.783] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690dff7a0 | out: phKey=0xe690dff7a0*=0x274ba5c1910) returned 1
	[0049.783] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd290000
	[0049.783] SetFilePointer (in: hFile=0x9b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.784] ReadFile (in: hFile=0x9b8, lpBuffer=0x274bd290000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0xe690dff7b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesRead=0xe690dff7b0*=0x11000, lpOverlapped=0x0) returned 1
	[0049.806] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690dff7ac*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690dff7ac*=0xf4250) returned 1
	[0049.806] CryptEncrypt (in: hKey=0x274ba5c1910, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd290000*, pdwDataLen=0xe690dff7a8*=0x11000, dwBufLen=0xf4250 | out: pbData=0x274bd290000*, pdwDataLen=0xe690dff7a8*=0x11010) returned 1
	[0049.806] SetFilePointer (in: hFile=0x9b8, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.806] WriteFile (in: hFile=0x9b8, lpBuffer=0x274bd290000*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0xe690dff7b0, lpOverlapped=0x0 | out: lpBuffer=0x274bd290000*, lpNumberOfBytesWritten=0xe690dff7b0*=0x11010, lpOverlapped=0x0) returned 1
	[0049.807] WriteFile (in: hFile=0x9b8, lpBuffer=0xe690dff7e8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690dff7b4, lpOverlapped=0x0 | out: lpBuffer=0xe690dff7e8*, lpNumberOfBytesWritten=0xe690dff7b4*=0x6, lpOverlapped=0x0) returned 1
	[0049.808] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690dff7c0 | out: pbData=0x0*, pdwDataLen=0xe690dff7c0*=0x10c) returned 1
	[0049.808] CryptExportKey (in: hKey=0x274ba5c1910, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690dff840, pdwDataLen=0xe690dff7c0 | out: pbData=0xe690dff840*, pdwDataLen=0xe690dff7c0*=0x10c) returned 1
	[0049.808] WriteFile (in: hFile=0x9b8, lpBuffer=0xe690dff840*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690dff7b4, lpOverlapped=0x0 | out: lpBuffer=0xe690dff840*, lpNumberOfBytesWritten=0xe690dff7b4*=0x10c, lpOverlapped=0x0) returned 1
	[0049.808] CloseHandle (hObject=0x9b8) returned 1
	[0049.985] VirtualFree (lpAddress=0x274bd290000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0049.989] CryptDestroyKey (hKey=0x274ba5c1910) returned 1

Thread:
	id = 282
	os_tid = 0x10ac

	[0049.743] SetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx", dwFileAttributes=0x80) returned 1
	[0049.777] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9bc
	[0049.777] GetFileSizeEx (in: hFile=0x9bc, lpFileSize=0xe690e7fa78 | out: lpFileSize=0xe690e7fa78*=1118208) returned 1
	[0049.777] GetFileSizeEx (in: hFile=0x9bc, lpFileSize=0xe690e7fa90 | out: lpFileSize=0xe690e7fa90*=1118208) returned 1
	[0049.777] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x110ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0049.777] ReadFile (in: hFile=0x9bc, lpBuffer=0xe690e7fae0, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690e7faa0, lpOverlapped=0x0 | out: lpBuffer=0xe690e7fae0*, lpNumberOfBytesRead=0xe690e7faa0*=0x19, lpOverlapped=0x0) returned 1
	[0049.789] SetFilePointer (in: hFile=0x9bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.789] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690e7fa60 | out: phKey=0xe690e7fa60*=0x274ba5c1210) returned 1
	[0049.789] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd390000
	[0049.790] SetFilePointer (in: hFile=0x9bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.790] ReadFile (in: hFile=0x9bc, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe690e7fa70, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe690e7fa70*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.921] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690e7fa6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690e7fa6c*=0xf4240) returned 1
	[0049.921] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe690e7fa68*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd390000*, pdwDataLen=0xe690e7fa68*=0xf4240) returned 1
	[0049.922] SetFilePointer (in: hFile=0x9bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.922] WriteFile (in: hFile=0x9bc, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe690e7fa70, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe690e7fa70*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.924] SetFilePointer (in: hFile=0x9bc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0049.924] ReadFile (in: hFile=0x9bc, lpBuffer=0x274bd390000, nNumberOfBytesToRead=0x1cdc0, lpNumberOfBytesRead=0xe690e7fa70, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesRead=0xe690e7fa70*=0x1cdc0, lpOverlapped=0x0) returned 1
	[0049.934] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690e7fa6c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690e7fa6c*=0xf4250) returned 1
	[0049.934] CryptEncrypt (in: hKey=0x274ba5c1210, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd390000*, pdwDataLen=0xe690e7fa68*=0x1cdc0, dwBufLen=0xf4250 | out: pbData=0x274bd390000*, pdwDataLen=0xe690e7fa68*=0x1cdd0) returned 1
	[0049.934] SetFilePointer (in: hFile=0x9bc, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0049.934] WriteFile (in: hFile=0x9bc, lpBuffer=0x274bd390000*, nNumberOfBytesToWrite=0x1cdd0, lpNumberOfBytesWritten=0xe690e7fa70, lpOverlapped=0x0 | out: lpBuffer=0x274bd390000*, lpNumberOfBytesWritten=0xe690e7fa70*=0x1cdd0, lpOverlapped=0x0) returned 1
	[0049.935] WriteFile (in: hFile=0x9bc, lpBuffer=0xe690e7faa8*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690e7fa74, lpOverlapped=0x0 | out: lpBuffer=0xe690e7faa8*, lpNumberOfBytesWritten=0xe690e7fa74*=0x6, lpOverlapped=0x0) returned 1
	[0049.935] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690e7fa80 | out: pbData=0x0*, pdwDataLen=0xe690e7fa80*=0x10c) returned 1
	[0049.935] CryptExportKey (in: hKey=0x274ba5c1210, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690e7fb00, pdwDataLen=0xe690e7fa80 | out: pbData=0xe690e7fb00*, pdwDataLen=0xe690e7fa80*=0x10c) returned 1
	[0049.935] WriteFile (in: hFile=0x9bc, lpBuffer=0xe690e7fb00*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690e7fa74, lpOverlapped=0x0 | out: lpBuffer=0xe690e7fb00*, lpNumberOfBytesWritten=0xe690e7fa74*=0x10c, lpOverlapped=0x0) returned 1
	[0049.935] CloseHandle (hObject=0x9bc) returned 1
	[0050.265] VirtualFree (lpAddress=0x274bd390000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.269] CryptDestroyKey (hKey=0x274ba5c1210) returned 1

Thread:
	id = 283
	os_tid = 0x10b0

	[0049.744] SetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx", dwFileAttributes=0x80) returned 1
	[0049.778] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c0
	[0049.778] GetFileSizeEx (in: hFile=0x9c0, lpFileSize=0xe690eff728 | out: lpFileSize=0xe690eff728*=69632) returned 1
	[0049.778] GetFileSizeEx (in: hFile=0x9c0, lpFileSize=0xe690eff740 | out: lpFileSize=0xe690eff740*=69632) returned 1
	[0049.778] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x10ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0049.779] ReadFile (in: hFile=0x9c0, lpBuffer=0xe690eff790, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690eff750, lpOverlapped=0x0 | out: lpBuffer=0xe690eff790*, lpNumberOfBytesRead=0xe690eff750*=0x19, lpOverlapped=0x0) returned 1
	[0049.915] SetFilePointer (in: hFile=0x9c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.915] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690eff710 | out: phKey=0xe690eff710*=0x274ba5c19f0) returned 1
	[0049.915] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd890000
	[0049.916] SetFilePointer (in: hFile=0x9c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.916] ReadFile (in: hFile=0x9c0, lpBuffer=0x274bd890000, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0xe690eff720, lpOverlapped=0x0 | out: lpBuffer=0x274bd890000*, lpNumberOfBytesRead=0xe690eff720*=0x11000, lpOverlapped=0x0) returned 1
	[0049.954] CryptEncrypt (in: hKey=0x274ba5c19f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690eff71c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690eff71c*=0xf4250) returned 1
	[0049.954] CryptEncrypt (in: hKey=0x274ba5c19f0, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd890000*, pdwDataLen=0xe690eff718*=0x11000, dwBufLen=0xf4250 | out: pbData=0x274bd890000*, pdwDataLen=0xe690eff718*=0x11010) returned 1
	[0049.954] SetFilePointer (in: hFile=0x9c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.954] WriteFile (in: hFile=0x9c0, lpBuffer=0x274bd890000*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0xe690eff720, lpOverlapped=0x0 | out: lpBuffer=0x274bd890000*, lpNumberOfBytesWritten=0xe690eff720*=0x11010, lpOverlapped=0x0) returned 1
	[0049.955] WriteFile (in: hFile=0x9c0, lpBuffer=0xe690eff758*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690eff724, lpOverlapped=0x0 | out: lpBuffer=0xe690eff758*, lpNumberOfBytesWritten=0xe690eff724*=0x6, lpOverlapped=0x0) returned 1
	[0049.955] CryptExportKey (in: hKey=0x274ba5c19f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690eff730 | out: pbData=0x0*, pdwDataLen=0xe690eff730*=0x10c) returned 1
	[0049.955] CryptExportKey (in: hKey=0x274ba5c19f0, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690eff7b0, pdwDataLen=0xe690eff730 | out: pbData=0xe690eff7b0*, pdwDataLen=0xe690eff730*=0x10c) returned 1
	[0049.955] WriteFile (in: hFile=0x9c0, lpBuffer=0xe690eff7b0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690eff724, lpOverlapped=0x0 | out: lpBuffer=0xe690eff7b0*, lpNumberOfBytesWritten=0xe690eff724*=0x10c, lpOverlapped=0x0) returned 1
	[0049.955] CloseHandle (hObject=0x9c0) returned 1
	[0050.023] VirtualFree (lpAddress=0x274bd890000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.028] CryptDestroyKey (hKey=0x274ba5c19f0) returned 1

Thread:
	id = 284
	os_tid = 0x10b4

	[0049.744] SetFileAttributesW (lpFileName="C:\\Logs\\System.evtx", dwFileAttributes=0x80) returned 1
	[0049.779] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x9c4
	[0049.779] GetFileSizeEx (in: hFile=0x9c4, lpFileSize=0xe690f7fc28 | out: lpFileSize=0xe690f7fc28*=1118208) returned 1
	[0049.779] GetFileSizeEx (in: hFile=0x9c4, lpFileSize=0xe690f7fc40 | out: lpFileSize=0xe690f7fc40*=1118208) returned 1
	[0049.780] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x110ede, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0049.780] ReadFile (in: hFile=0x9c4, lpBuffer=0xe690f7fc90, nNumberOfBytesToRead=0x19, lpNumberOfBytesRead=0xe690f7fc50, lpOverlapped=0x0 | out: lpBuffer=0xe690f7fc90*, lpNumberOfBytesRead=0xe690f7fc50*=0x19, lpOverlapped=0x0) returned 1
	[0049.810] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.810] CryptGenKey (in: hProv=0x274ba59fec0, Algid=0x6610, dwFlags=0x1, phKey=0xe690f7fc10 | out: phKey=0xe690f7fc10*=0x274ba5c1280) returned 1
	[0049.810] VirtualAlloc (lpAddress=0x0, dwSize=0xf429a, flAllocationType=0x1000, flProtect=0x4) returned 0x274bd490000
	[0049.811] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.811] ReadFile (in: hFile=0x9c4, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0xf4240, lpNumberOfBytesRead=0xe690f7fc20, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe690f7fc20*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.930] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690f7fc1c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690f7fc1c*=0xf4240) returned 1
	[0049.930] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=0, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe690f7fc18*=0xf4240, dwBufLen=0xf4240 | out: pbData=0x274bd490000*, pdwDataLen=0xe690f7fc18*=0xf4240) returned 1
	[0049.931] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0049.931] WriteFile (in: hFile=0x9c4, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0xf4240, lpNumberOfBytesWritten=0xe690f7fc20, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe690f7fc20*=0xf4240, lpOverlapped=0x0) returned 1
	[0049.933] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0049.933] ReadFile (in: hFile=0x9c4, lpBuffer=0x274bd490000, nNumberOfBytesToRead=0x1cdc0, lpNumberOfBytesRead=0xe690f7fc20, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesRead=0xe690f7fc20*=0x1cdc0, lpOverlapped=0x0) returned 1
	[0049.957] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x0*, pdwDataLen=0xe690f7fc1c*=0xf4240, dwBufLen=0x0 | out: pbData=0x0*, pdwDataLen=0xe690f7fc1c*=0xf4250) returned 1
	[0049.957] CryptEncrypt (in: hKey=0x274ba5c1280, hHash=0x0, Final=1, dwFlags=0x0, pbData=0x274bd490000*, pdwDataLen=0xe690f7fc18*=0x1cdc0, dwBufLen=0xf4250 | out: pbData=0x274bd490000*, pdwDataLen=0xe690f7fc18*=0x1cdd0) returned 1
	[0049.957] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=1000000, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0xf4240
	[0049.957] WriteFile (in: hFile=0x9c4, lpBuffer=0x274bd490000*, nNumberOfBytesToWrite=0x1cdd0, lpNumberOfBytesWritten=0xe690f7fc20, lpOverlapped=0x0 | out: lpBuffer=0x274bd490000*, lpNumberOfBytesWritten=0xe690f7fc20*=0x1cdd0, lpOverlapped=0x0) returned 1
	[0049.957] WriteFile (in: hFile=0x9c4, lpBuffer=0xe690f7fc58*, nNumberOfBytesToWrite=0x6, lpNumberOfBytesWritten=0xe690f7fc24, lpOverlapped=0x0 | out: lpBuffer=0xe690f7fc58*, lpNumberOfBytesWritten=0xe690f7fc24*=0x6, lpOverlapped=0x0) returned 1
	[0049.958] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0x0, pdwDataLen=0xe690f7fc30 | out: pbData=0x0*, pdwDataLen=0xe690f7fc30*=0x10c) returned 1
	[0049.958] CryptExportKey (in: hKey=0x274ba5c1280, hExpKey=0x274ba5c18a0, dwBlobType=0x1, dwFlags=0x0, pbData=0xe690f7fcb0, pdwDataLen=0xe690f7fc30 | out: pbData=0xe690f7fcb0*, pdwDataLen=0xe690f7fc30*=0x10c) returned 1
	[0049.958] WriteFile (in: hFile=0x9c4, lpBuffer=0xe690f7fcb0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0xe690f7fc24, lpOverlapped=0x0 | out: lpBuffer=0xe690f7fcb0*, lpNumberOfBytesWritten=0xe690f7fc24*=0x10c, lpOverlapped=0x0) returned 1
	[0049.958] CloseHandle (hObject=0x9c4) returned 1
	[0050.276] VirtualFree (lpAddress=0x274bd490000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0050.280] CryptDestroyKey (hKey=0x274ba5c1280) returned 1

Thread:
	id = 285
	os_tid = 0x10b8

	[0049.745] SetFileAttributesW (lpFileName="C:\\pagefile.sys", dwFileAttributes=0x80) returned 0
	[0049.745] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 286
	os_tid = 0x10bc

	[0049.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0
	[0049.746] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 287
	os_tid = 0x10c0

	[0049.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml", dwFileAttributes=0x80) returned 0
	[0049.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 288
	os_tid = 0x10c4

	[0049.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash", dwFileAttributes=0x80) returned 0
	[0049.748] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 289
	os_tid = 0x10c8

	[0049.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash", dwFileAttributes=0x80) returned 0
	[0049.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 290
	os_tid = 0x10cc

	[0049.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml", dwFileAttributes=0x80) returned 0
	[0049.750] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 291
	os_tid = 0x10d0

	[0049.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml", dwFileAttributes=0x80) returned 0
	[0049.751] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 294
	os_tid = 0x10d4

	[0050.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml", dwFileAttributes=0x80) returned 0
	[0050.309] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 295
	os_tid = 0x10d8

	[0050.240] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml", dwFileAttributes=0x80) returned 0
	[0050.313] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.313] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 296
	os_tid = 0x10dc

	[0050.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi", dwFileAttributes=0x80) returned 0
	[0050.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.244] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 297
	os_tid = 0x10e0

	[0050.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi", dwFileAttributes=0x80) returned 0
	[0050.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.247] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 298
	os_tid = 0x10e4

	[0050.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi", dwFileAttributes=0x80) returned 0
	[0050.249] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 299
	os_tid = 0x10e8

	[0050.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi", dwFileAttributes=0x80) returned 0
	[0050.253] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.254] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 300
	os_tid = 0x10ec

	[0050.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi", dwFileAttributes=0x80) returned 0
	[0050.256] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.258] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 301
	os_tid = 0x10f0

	[0050.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi", dwFileAttributes=0x80) returned 0
	[0050.259] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.261] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 302
	os_tid = 0x10f4

	[0050.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi", dwFileAttributes=0x80) returned 0
	[0050.263] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.264] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 303
	os_tid = 0x10f8

	[0050.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi", dwFileAttributes=0x80) returned 0
	[0050.282] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.284] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 304
	os_tid = 0x1100

	[0050.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi", dwFileAttributes=0x80) returned 0
	[0050.323] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 305
	os_tid = 0x1104

	[0050.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml", dwFileAttributes=0x80) returned 0
	[0050.287] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.287] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 306
	os_tid = 0x1108

	[0050.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml", dwFileAttributes=0x80) returned 0
	[0050.288] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 307
	os_tid = 0x110c

	[0050.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml", dwFileAttributes=0x80) returned 0
	[0050.289] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert\\insertbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 308
	os_tid = 0x1110

	[0050.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml", dwFileAttributes=0x80) returned 0
	[0050.291] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\insert.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\insert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.291] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 309
	os_tid = 0x1114

	[0050.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml", dwFileAttributes=0x80) returned 0
	[0050.320] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\ea.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 310
	os_tid = 0x1118

	[0050.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml", dwFileAttributes=0x80) returned 0
	[0050.292] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\keypadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 311
	os_tid = 0x111c

	[0050.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml", dwFileAttributes=0x80) returned 0
	[0050.293] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad\\kor-kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 312
	os_tid = 0x1120

	[0050.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml", dwFileAttributes=0x80) returned 0
	[0050.293] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\keypad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 313
	os_tid = 0x1124

	[0050.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml", dwFileAttributes=0x80) returned 0
	[0050.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 314
	os_tid = 0x1128

	[0050.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml", dwFileAttributes=0x80) returned 0
	[0050.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\baseAltGr_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\basealtgr_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 315
	os_tid = 0x112c

	[0050.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml", dwFileAttributes=0x80) returned 0
	[0050.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_altgr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 316
	os_tid = 0x1130

	[0050.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml", dwFileAttributes=0x80) returned 0
	[0050.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 317
	os_tid = 0x1134

	[0050.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml", dwFileAttributes=0x80) returned 0
	[0050.744] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_heb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 318
	os_tid = 0x1138

	[0050.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml", dwFileAttributes=0x80) returned 0
	[0050.745] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_jpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 319
	os_tid = 0x113c

	[0050.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml", dwFileAttributes=0x80) returned 0
	[0050.745] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_kor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 320
	os_tid = 0x1140

	[0050.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml", dwFileAttributes=0x80) returned 0
	[0050.746] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\base_rtl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 321
	os_tid = 0x1144

	[0050.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml", dwFileAttributes=0x80) returned 0
	[0050.747] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ja-jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 322
	os_tid = 0x1148

	[0050.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml", dwFileAttributes=0x80) returned 0
	[0050.748] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\ko-kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 323
	os_tid = 0x114c

	[0050.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml", dwFileAttributes=0x80) returned 0
	[0050.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-changjei.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.754] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 324
	os_tid = 0x1150

	[0050.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml", dwFileAttributes=0x80) returned 0
	[0050.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-dayi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 325
	os_tid = 0x1154

	[0050.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml", dwFileAttributes=0x80) returned 0
	[0050.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main\\zh-phonetic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.761] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 326
	os_tid = 0x1158

	[0050.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml", dwFileAttributes=0x80) returned 0
	[0050.762] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\main.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.762] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 327
	os_tid = 0x115c

	[0050.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml", dwFileAttributes=0x80) returned 0
	[0050.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui\\oskclearuibase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.763] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 328
	os_tid = 0x1160

	[0050.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml", dwFileAttributes=0x80) returned 0
	[0050.764] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskclearui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.764] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 329
	os_tid = 0x1164

	[0050.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml", dwFileAttributes=0x80) returned 0
	[0050.765] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu\\oskmenubase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 330
	os_tid = 0x1168

	[0050.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml", dwFileAttributes=0x80) returned 0
	[0050.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskmenu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 331
	os_tid = 0x116c

	[0050.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml", dwFileAttributes=0x80) returned 0
	[0050.766] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav\\osknavbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 332
	os_tid = 0x1170

	[0050.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml", dwFileAttributes=0x80) returned 0
	[0050.767] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknav.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 333
	os_tid = 0x1174

	[0050.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml", dwFileAttributes=0x80) returned 0
	[0050.768] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad\\osknumpadbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.768] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 334
	os_tid = 0x1178

	[0050.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml", dwFileAttributes=0x80) returned 0
	[0050.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\osknumpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 335
	os_tid = 0x117c

	[0050.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml", dwFileAttributes=0x80) returned 0
	[0050.769] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred\\oskpredbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 336
	os_tid = 0x1180

	[0050.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml", dwFileAttributes=0x80) returned 0
	[0050.770] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\oskpred.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.770] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 337
	os_tid = 0x1184

	[0050.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml", dwFileAttributes=0x80) returned 0
	[0050.771] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ea-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.771] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 338
	os_tid = 0x1188

	[0050.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml", dwFileAttributes=0x80) returned 0
	[0050.773] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\ja-jp-sym.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.773] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 339
	os_tid = 0x118c

	[0050.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml", dwFileAttributes=0x80) returned 0
	[0050.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols\\symbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.774] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 340
	os_tid = 0x1190

	[0050.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml", dwFileAttributes=0x80) returned 0
	[0050.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\symbols.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 341
	os_tid = 0x1194

	[0050.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat", dwFileAttributes=0x80) returned 0
	[0050.787] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrcommonlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrcommonlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.787] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 342
	os_tid = 0x1198

	[0050.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat", dwFileAttributes=0x80) returned 0
	[0050.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrenclm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrenclm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 343
	os_tid = 0x119c

	[0050.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat", dwFileAttributes=0x80) returned 0
	[0050.786] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrlatinlm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrlatinlm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 344
	os_tid = 0x11a0

	[0050.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat", dwFileAttributes=0x80) returned 0
	[0050.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 345
	os_tid = 0x11a4

	[0050.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat", dwFileAttributes=0x80) returned 0
	[0050.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 346
	os_tid = 0x11a8

	[0050.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml", dwFileAttributes=0x80) returned 0
	[0050.784] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsar.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 347
	os_tid = 0x11ac

	[0050.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml", dwFileAttributes=0x80) returned 0
	[0050.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 348
	os_tid = 0x11b0

	[0050.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml", dwFileAttributes=0x80) returned 0
	[0050.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 349
	os_tid = 0x11b4

	[0050.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml", dwFileAttributes=0x80) returned 0
	[0050.782] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 350
	os_tid = 0x11b8

	[0051.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml", dwFileAttributes=0x80) returned 0
	[0051.208] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.208] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 351
	os_tid = 0x11c0

	[0051.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml", dwFileAttributes=0x80) returned 0
	[0051.210] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 352
	os_tid = 0x11c4

	[0051.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml", dwFileAttributes=0x80) returned 0
	[0051.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.211] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 353
	os_tid = 0x11c8

	[0051.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml", dwFileAttributes=0x80) returned 0
	[0051.211] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.212] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 354
	os_tid = 0x11cc

	[0051.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml", dwFileAttributes=0x80) returned 0
	[0051.213] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsen.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsen.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 355
	os_tid = 0x11d0

	[0051.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml", dwFileAttributes=0x80) returned 0
	[0051.213] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsesp.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsesp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 356
	os_tid = 0x11d4

	[0051.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml", dwFileAttributes=0x80) returned 0
	[0051.214] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfin.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfin.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 357
	os_tid = 0x11d8

	[0051.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml", dwFileAttributes=0x80) returned 0
	[0051.214] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsfra.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsfra.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.215] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 358
	os_tid = 0x11dc

	[0051.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml", dwFileAttributes=0x80) returned 0
	[0051.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshe.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshe.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.216] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 359
	os_tid = 0x11e0

	[0051.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml", dwFileAttributes=0x80) returned 0
	[0051.216] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshi.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshi.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.216] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 360
	os_tid = 0x11e4

	[0051.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml", dwFileAttributes=0x80) returned 0
	[0051.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipshrv.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipshrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.217] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 361
	os_tid = 0x11e8

	[0051.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml", dwFileAttributes=0x80) returned 0
	[0051.217] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsid.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsid.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 362
	os_tid = 0x11ec

	[0051.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml", dwFileAttributes=0x80) returned 0
	[0051.219] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsita.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsita.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 363
	os_tid = 0x11f0

	[0051.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml", dwFileAttributes=0x80) returned 0
	[0051.219] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsjpn.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsjpn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 364
	os_tid = 0x11f4

	[0051.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml", dwFileAttributes=0x80) returned 0
	[0051.222] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipskor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipskor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.222] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 365
	os_tid = 0x11f8

	[0051.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml", dwFileAttributes=0x80) returned 0
	[0051.224] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnld.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnld.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.224] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 366
	os_tid = 0x11fc

	[0051.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml", dwFileAttributes=0x80) returned 0
	[0051.226] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsnor.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsnor.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.226] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 367
	os_tid = 0x1200

	[0051.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml", dwFileAttributes=0x80) returned 0
	[0051.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsplk.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsplk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.228] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 368
	os_tid = 0x1204

	[0051.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml", dwFileAttributes=0x80) returned 0
	[0051.235] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.235] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 369
	os_tid = 0x1208

	[0051.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml", dwFileAttributes=0x80) returned 0
	[0051.237] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsptg.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsptg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 370
	os_tid = 0x120c

	[0051.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml", dwFileAttributes=0x80) returned 0
	[0051.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrom.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrom.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.240] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 371
	os_tid = 0x1210

	[0051.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml", dwFileAttributes=0x80) returned 0
	[0051.241] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsrus.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsrus.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.242] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 372
	os_tid = 0x1214

	[0051.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml", dwFileAttributes=0x80) returned 0
	[0051.248] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrb.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrb.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.249] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 373
	os_tid = 0x1218

	[0051.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml", dwFileAttributes=0x80) returned 0
	[0051.250] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssrl.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssrl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 374
	os_tid = 0x121c

	[0051.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml", dwFileAttributes=0x80) returned 0
	[0051.254] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipssve.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipssve.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.254] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 375
	os_tid = 0x1220

	[0051.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml", dwFileAttributes=0x80) returned 0
	[0051.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipstr.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipstr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.255] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 376
	os_tid = 0x1224

	[0051.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml", dwFileAttributes=0x80) returned 0
	[0051.258] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\LanguageModel\\chstic.dgml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\languagemodel\\chstic.dgml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 379
	os_tid = 0x122c

	[0051.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0
	[0051.615] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.616] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 380
	os_tid = 0x1230

	[0051.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm", dwFileAttributes=0x80) returned 0
	[0051.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.626] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 381
	os_tid = 0x1234

	[0051.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg", dwFileAttributes=0x80) returned 0
	[0051.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Bears.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.632] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 382
	os_tid = 0x1238

	[0051.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm", dwFileAttributes=0x80) returned 0
	[0051.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.628] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 383
	os_tid = 0x123c

	[0051.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg", dwFileAttributes=0x80) returned 0
	[0051.637] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 384
	os_tid = 0x1240

	[0051.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm", dwFileAttributes=0x80) returned 0
	[0051.626] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.626] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 385
	os_tid = 0x1244

	[0051.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg", dwFileAttributes=0x80) returned 0
	[0051.658] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 386
	os_tid = 0x1248

	[0051.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm", dwFileAttributes=0x80) returned 0
	[0051.628] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.628] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 387
	os_tid = 0x124c

	[0051.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg", dwFileAttributes=0x80) returned 0
	[0051.641] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 388
	os_tid = 0x1250

	[0051.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm", dwFileAttributes=0x80) returned 0
	[0051.630] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.630] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 389
	os_tid = 0x1254

	[0051.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg", dwFileAttributes=0x80) returned 0
	[0051.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.640] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 390
	os_tid = 0x1258

	[0051.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm", dwFileAttributes=0x80) returned 0
	[0051.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.629] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 391
	os_tid = 0x125c

	[0051.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg", dwFileAttributes=0x80) returned 0
	[0051.640] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Peacock.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.640] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 392
	os_tid = 0x1260

	[0051.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm", dwFileAttributes=0x80) returned 0
	[0051.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.629] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 393
	os_tid = 0x1264

	[0051.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg", dwFileAttributes=0x80) returned 0
	[0051.639] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Roses.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.639] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 394
	os_tid = 0x1268

	[0051.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm", dwFileAttributes=0x80) returned 0
	[0051.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Shades of Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 395
	os_tid = 0x126c

	[0051.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg", dwFileAttributes=0x80) returned 0
	[0051.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.638] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 396
	os_tid = 0x1270

	[0051.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm", dwFileAttributes=0x80) returned 0
	[0051.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Soft Blue.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 397
	os_tid = 0x1274

	[0051.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg", dwFileAttributes=0x80) returned 0
	[0051.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\SoftBlue.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.633] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 398
	os_tid = 0x1278

	[0051.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm", dwFileAttributes=0x80) returned 0
	[0051.638] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.638] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 399
	os_tid = 0x127c

	[0051.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg", dwFileAttributes=0x80) returned 0
	[0051.642] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 400
	os_tid = 0x1284

	[0051.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb", dwFileAttributes=0x80) returned 0
	[0051.643] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.643] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 401
	os_tid = 0x1288

	[0051.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb", dwFileAttributes=0x80) returned 0
	[0051.644] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.644] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 402
	os_tid = 0x128c

	[0051.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x80) returned 0
	[0051.660] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 403
	os_tid = 0x1290

	[0051.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc", dwFileAttributes=0x80) returned 0
	[0051.677] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 404
	os_tid = 0x1294

	[0051.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc", dwFileAttributes=0x80) returned 0
	[0051.678] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 405
	os_tid = 0x1298

	[0051.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb", dwFileAttributes=0x80) returned 0
	[0051.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 406
	os_tid = 0x129c

	[0051.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb", dwFileAttributes=0x80) returned 0
	[0051.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 407
	os_tid = 0x12a0

	[0051.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb", dwFileAttributes=0x80) returned 0
	[0051.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 408
	os_tid = 0x12a4

	[0051.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb", dwFileAttributes=0x80) returned 0
	[0051.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 409
	os_tid = 0x12a8

	[0051.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb", dwFileAttributes=0x80) returned 0
	[0051.697] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 410
	os_tid = 0x12ac

	[0051.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb", dwFileAttributes=0x80) returned 0
	[0051.696] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 411
	os_tid = 0x12b0

	[0051.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb", dwFileAttributes=0x80) returned 0
	[0051.695] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 412
	os_tid = 0x12b4

	[0051.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb", dwFileAttributes=0x80) returned 0
	[0051.695] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 413
	os_tid = 0x12b8

	[0051.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb", dwFileAttributes=0x80) returned 0
	[0051.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msador28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 414
	os_tid = 0x12bc

	[0051.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb", dwFileAttributes=0x80) returned 0
	[0051.694] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadox28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msadox28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 415
	os_tid = 0x12c4

	[0051.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc", dwFileAttributes=0x80) returned 0
	[0051.705] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.705] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 416
	os_tid = 0x12c8

	[0051.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc", dwFileAttributes=0x80) returned 0
	[0051.706] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.706] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 417
	os_tid = 0x12cc

	[0051.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui", dwFileAttributes=0x80) returned 0
	[0051.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqloledb.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqloledb.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.712] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 418
	os_tid = 0x12d0

	[0051.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui", dwFileAttributes=0x80) returned 0
	[0051.711] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\en-US\\sqlxmlx.rll.mui" (normalized: "c:\\program files\\common files\\system\\ole db\\en-us\\sqlxmlx.rll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.711] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 419
	os_tid = 0x12d4

	[0051.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc", dwFileAttributes=0x80) returned 0
	[0051.708] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 420
	os_tid = 0x12d8

	[0051.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc", dwFileAttributes=0x80) returned 0
	[0051.710] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbvbs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.710] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 421
	os_tid = 0x12dc

	[0051.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll", dwFileAttributes=0x80) returned 0
	[0051.713] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqloledb.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqloledb.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.713] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 422
	os_tid = 0x12e0

	[0051.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll", dwFileAttributes=0x80) returned 0
	[0051.715] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\sqlxmlx.rll" (normalized: "c:\\program files\\common files\\system\\ole db\\sqlxmlx.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.715] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 423
	os_tid = 0x12e4

	[0051.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico", dwFileAttributes=0x80) returned 0
	[0051.716] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\images\\bing.ico" (normalized: "c:\\program files\\internet explorer\\images\\bing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 424
	os_tid = 0x12e8

	[0051.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins", dwFileAttributes=0x80) returned 0
	[0051.729] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 425
	os_tid = 0x12ec

	[0051.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl", dwFileAttributes=0x80) returned 0
	[0051.717] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.cpl" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0051.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 426
	os_tid = 0x12f4

	[0052.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x80) returned 0
	[0052.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.098] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 427
	os_tid = 0x12f8

	[0052.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", dwFileAttributes=0x80) returned 0
	[0052.099] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 428
	os_tid = 0x12fc

	[0052.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", dwFileAttributes=0x80) returned 0
	[0052.100] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.100] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 429
	os_tid = 0x1300

	[0052.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties", dwFileAttributes=0x80) returned 0
	[0052.100] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.100] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 430
	os_tid = 0x1304

	[0052.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", dwFileAttributes=0x80) returned 0
	[0052.101] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.101] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 431
	os_tid = 0x1308

	[0052.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties", dwFileAttributes=0x80) returned 0
	[0052.102] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.102] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 432
	os_tid = 0x130c

	[0052.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", dwFileAttributes=0x80) returned 0
	[0052.103] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.103] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 433
	os_tid = 0x1310

	[0052.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", dwFileAttributes=0x80) returned 0
	[0052.103] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.104] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 434
	os_tid = 0x1314

	[0052.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", dwFileAttributes=0x80) returned 0
	[0052.104] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.104] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 435
	os_tid = 0x1318

	[0052.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", dwFileAttributes=0x80) returned 0
	[0052.105] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 436
	os_tid = 0x131c

	[0052.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", dwFileAttributes=0x80) returned 0
	[0052.106] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 437
	os_tid = 0x1320

	[0052.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", dwFileAttributes=0x80) returned 0
	[0052.106] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.107] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 438
	os_tid = 0x1324

	[0052.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", dwFileAttributes=0x80) returned 0
	[0052.107] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.107] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 439
	os_tid = 0x1328

	[0052.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties", dwFileAttributes=0x80) returned 0
	[0052.108] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.108] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 440
	os_tid = 0x132c

	[0052.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", dwFileAttributes=0x80) returned 0
	[0052.108] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 441
	os_tid = 0x1330

	[0052.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", dwFileAttributes=0x80) returned 0
	[0052.111] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 442
	os_tid = 0x1334

	[0052.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties", dwFileAttributes=0x80) returned 0
	[0052.114] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 443
	os_tid = 0x1338

	[0052.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties", dwFileAttributes=0x80) returned 0
	[0052.117] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.119] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 444
	os_tid = 0x133c

	[0052.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties", dwFileAttributes=0x80) returned 0
	[0052.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.122] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 445
	os_tid = 0x1340

	[0052.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties", dwFileAttributes=0x80) returned 0
	[0052.124] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 446
	os_tid = 0x1344

	[0052.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties", dwFileAttributes=0x80) returned 0
	[0052.128] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.129] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 447
	os_tid = 0x1348

	[0052.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties", dwFileAttributes=0x80) returned 0
	[0052.131] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.133] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 448
	os_tid = 0x134c

	[0052.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties", dwFileAttributes=0x80) returned 0
	[0052.135] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.136] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 449
	os_tid = 0x1350

	[0052.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties", dwFileAttributes=0x80) returned 0
	[0052.139] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.140] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 450
	os_tid = 0x1354

	[0052.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties", dwFileAttributes=0x80) returned 0
	[0052.142] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.144] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 451
	os_tid = 0x1358

	[0052.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties", dwFileAttributes=0x80) returned 0
	[0052.146] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.147] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 452
	os_tid = 0x135c

	[0052.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties", dwFileAttributes=0x80) returned 0
	[0052.150] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 453
	os_tid = 0x1360

	[0052.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties", dwFileAttributes=0x80) returned 0
	[0052.153] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 454
	os_tid = 0x1364

	[0052.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", dwFileAttributes=0x80) returned 0
	[0052.156] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 455
	os_tid = 0x1368

	[0052.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", dwFileAttributes=0x80) returned 0
	[0052.160] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 456
	os_tid = 0x136c

	[0052.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", dwFileAttributes=0x80) returned 0
	[0052.163] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 457
	os_tid = 0x1370

	[0052.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", dwFileAttributes=0x80) returned 0
	[0052.167] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 458
	os_tid = 0x1374

	[0052.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", dwFileAttributes=0x80) returned 0
	[0052.169] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 459
	os_tid = 0x1378

	[0052.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", dwFileAttributes=0x80) returned 0
	[0052.172] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 460
	os_tid = 0x137c

	[0052.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", dwFileAttributes=0x80) returned 0
	[0052.175] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 461
	os_tid = 0x1380

	[0052.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", dwFileAttributes=0x80) returned 0
	[0052.179] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 462
	os_tid = 0x1384

	[0052.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", dwFileAttributes=0x80) returned 0
	[0052.182] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 463
	os_tid = 0x1388

	[0052.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", dwFileAttributes=0x80) returned 0
	[0052.185] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 464
	os_tid = 0x138c

	[0052.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", dwFileAttributes=0x80) returned 0
	[0052.189] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 465
	os_tid = 0x1390

	[0052.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", dwFileAttributes=0x80) returned 0
	[0052.193] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 466
	os_tid = 0x1394

	[0052.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", dwFileAttributes=0x80) returned 0
	[0052.197] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 467
	os_tid = 0x1398

	[0052.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", dwFileAttributes=0x80) returned 0
	[0052.201] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 468
	os_tid = 0x139c

	[0052.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", dwFileAttributes=0x80) returned 0
	[0052.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.206] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 469
	os_tid = 0x13a0

	[0052.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", dwFileAttributes=0x80) returned 0
	[0052.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 470
	os_tid = 0x13a4

	[0052.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", dwFileAttributes=0x80) returned 0
	[0052.213] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 471
	os_tid = 0x13a8

	[0052.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", dwFileAttributes=0x80) returned 0
	[0052.217] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 472
	os_tid = 0x13ac

	[0052.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties", dwFileAttributes=0x80) returned 0
	[0052.218] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 473
	os_tid = 0x13b0

	[0052.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc", dwFileAttributes=0x80) returned 0
	[0052.220] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.220] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 474
	os_tid = 0x13b4

	[0052.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", dwFileAttributes=0x80) returned 0
	[0052.220] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.220] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 475
	os_tid = 0x13b8

	[0052.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf", dwFileAttributes=0x80) returned 0
	[0052.237] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 476
	os_tid = 0x13bc

	[0052.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf", dwFileAttributes=0x80) returned 0
	[0052.240] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.242] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 477
	os_tid = 0x13c0

	[0052.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf", dwFileAttributes=0x80) returned 0
	[0052.243] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.245] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 478
	os_tid = 0x13c4

	[0052.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf", dwFileAttributes=0x80) returned 0
	[0052.247] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.249] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 479
	os_tid = 0x13c8

	[0052.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf", dwFileAttributes=0x80) returned 0
	[0052.251] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.252] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 480
	os_tid = 0x13cc

	[0052.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf", dwFileAttributes=0x80) returned 0
	[0052.254] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.256] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 481
	os_tid = 0x13d0

	[0052.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf", dwFileAttributes=0x80) returned 0
	[0052.257] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 482
	os_tid = 0x13d4

	[0052.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf", dwFileAttributes=0x80) returned 0
	[0052.261] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.262] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 483
	os_tid = 0x13d8

	[0052.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties", dwFileAttributes=0x80) returned 0
	[0052.263] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.263] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 484
	os_tid = 0x13dc

	[0052.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties", dwFileAttributes=0x80) returned 0
	[0052.271] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.273] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 485
	os_tid = 0x13e0

	[0052.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.275] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 486
	os_tid = 0x13e4

	[0052.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.278] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 487
	os_tid = 0x13e8

	[0052.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 488
	os_tid = 0x13ec

	[0052.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.285] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 489
	os_tid = 0x13f0

	[0052.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.288] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 490
	os_tid = 0x13f4

	[0052.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.292] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 491
	os_tid = 0x13f8

	[0052.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", dwFileAttributes=0x80) returned 0
	[0052.295] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 492
	os_tid = 0x13fc

	[0052.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties", dwFileAttributes=0x80) returned 0
	[0052.302] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.302] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 493
	os_tid = 0x9e8

	[0052.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", dwFileAttributes=0x80) returned 0
	[0052.303] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.303] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 494
	os_tid = 0x9fc

	[0052.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", dwFileAttributes=0x80) returned 0
	[0052.304] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.304] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 495
	os_tid = 0xd9c

	[0052.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc", dwFileAttributes=0x80) returned 0
	[0052.305] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 496
	os_tid = 0xfcc

	[0052.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc", dwFileAttributes=0x80) returned 0
	[0052.305] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 497
	os_tid = 0xf74

	[0052.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", dwFileAttributes=0x80) returned 0
	[0052.306] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.306] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 498
	os_tid = 0xfc8

	[0052.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", dwFileAttributes=0x80) returned 0
	[0052.307] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 499
	os_tid = 0x1404

	[0052.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", dwFileAttributes=0x80) returned 0
	[0052.307] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 500
	os_tid = 0x1408

	[0052.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", dwFileAttributes=0x80) returned 0
	[0052.308] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.308] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 501
	os_tid = 0x140c

	[0052.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties", dwFileAttributes=0x80) returned 0
	[0052.309] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 502
	os_tid = 0x1410

	[0052.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access", dwFileAttributes=0x80) returned 0
	[0052.311] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.312] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 503
	os_tid = 0x1414

	[0052.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", dwFileAttributes=0x80) returned 0
	[0052.315] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 504
	os_tid = 0x1418

	[0052.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties", dwFileAttributes=0x80) returned 0
	[0052.318] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 505
	os_tid = 0x141c

	[0052.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", dwFileAttributes=0x80) returned 0
	[0052.322] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 506
	os_tid = 0x1420

	[0052.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", dwFileAttributes=0x80) returned 0
	[0052.324] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 507
	os_tid = 0x1424

	[0052.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", dwFileAttributes=0x80) returned 0
	[0052.325] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 508
	os_tid = 0x1428

	[0052.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties", dwFileAttributes=0x80) returned 0
	[0052.326] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 509
	os_tid = 0x142c

	[0052.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", dwFileAttributes=0x80) returned 0
	[0052.327] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 510
	os_tid = 0x1430

	[0052.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", dwFileAttributes=0x80) returned 0
	[0052.328] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 511
	os_tid = 0x1434

	[0052.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties", dwFileAttributes=0x80) returned 0
	[0052.329] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 512
	os_tid = 0x1438

	[0052.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", dwFileAttributes=0x80) returned 0
	[0052.330] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 513
	os_tid = 0x143c

	[0052.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", dwFileAttributes=0x80) returned 0
	[0052.331] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.331] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 514
	os_tid = 0x1440

	[0052.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", dwFileAttributes=0x80) returned 0
	[0052.333] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 515
	os_tid = 0x1444

	[0052.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs", dwFileAttributes=0x80) returned 0
	[0052.336] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 516
	os_tid = 0x1448

	[0052.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", dwFileAttributes=0x80) returned 0
	[0052.340] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 517
	os_tid = 0x144c

	[0052.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy", dwFileAttributes=0x80) returned 0
	[0052.344] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 518
	os_tid = 0x1450

	[0052.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security", dwFileAttributes=0x80) returned 0
	[0052.348] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 519
	os_tid = 0x1454

	[0052.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy", dwFileAttributes=0x80) returned 0
	[0052.352] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.353] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 520
	os_tid = 0x1458

	[0052.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", dwFileAttributes=0x80) returned 0
	[0052.355] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 521
	os_tid = 0x145c

	[0052.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries", dwFileAttributes=0x80) returned 0
	[0052.359] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 522
	os_tid = 0x1460

	[0052.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", dwFileAttributes=0x80) returned 0
	[0052.363] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 523
	os_tid = 0x1464

	[0052.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties", dwFileAttributes=0x80) returned 0
	[0052.365] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 524
	os_tid = 0x1468

	[0052.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", dwFileAttributes=0x80) returned 0
	[0052.365] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.366] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 525
	os_tid = 0x146c

	[0052.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", dwFileAttributes=0x80) returned 0
	[0052.367] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 526
	os_tid = 0x1470

	[0052.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", dwFileAttributes=0x80) returned 0
	[0052.367] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 527
	os_tid = 0x1474

	[0052.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", dwFileAttributes=0x80) returned 0
	[0052.369] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.369] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 528
	os_tid = 0x1478

	[0052.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", dwFileAttributes=0x80) returned 0
	[0052.369] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.369] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 529
	os_tid = 0x147c

	[0052.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x80) returned 0
	[0052.370] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 530
	os_tid = 0x1480

	[0052.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x80) returned 0
	[0052.371] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 531
	os_tid = 0x1484

	[0052.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", dwFileAttributes=0x80) returned 0
	[0052.371] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.372] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 532
	os_tid = 0x1488

	[0052.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x80) returned 0
	[0052.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.372] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 533
	os_tid = 0x148c

	[0052.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x80) returned 0
	[0052.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 534
	os_tid = 0x1490

	[0052.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", dwFileAttributes=0x80) returned 0
	[0052.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 535
	os_tid = 0x1494

	[0052.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", dwFileAttributes=0x80) returned 0
	[0052.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.375] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 536
	os_tid = 0x1498

	[0052.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", dwFileAttributes=0x80) returned 0
	[0052.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0052.375] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 537
	os_tid = 0x14a0

	[0052.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.053] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 538
	os_tid = 0x14a4

	[0052.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.054] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 539
	os_tid = 0x14a8

	[0052.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 540
	os_tid = 0x14ac

	[0052.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 541
	os_tid = 0x14b0

	[0052.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.062] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 542
	os_tid = 0x14b4

	[0052.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 543
	os_tid = 0x14b8

	[0052.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.063] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 544
	os_tid = 0x14bc

	[0052.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.063] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 545
	os_tid = 0x14c0

	[0052.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.056] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 546
	os_tid = 0x14c4

	[0052.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.064] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 547
	os_tid = 0x14c8

	[0052.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.064] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 548
	os_tid = 0x14cc

	[0052.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.065] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 549
	os_tid = 0x14d0

	[0052.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.065] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 550
	os_tid = 0x14d4

	[0052.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.056] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 551
	os_tid = 0x14d8

	[0052.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 552
	os_tid = 0x14dc

	[0052.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.074] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 553
	os_tid = 0x14e0

	[0052.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.074] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 554
	os_tid = 0x14e4

	[0052.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.075] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 555
	os_tid = 0x14e8

	[0052.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.075] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 556
	os_tid = 0x14ec

	[0052.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.076] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 557
	os_tid = 0x14f0

	[0052.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.076] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 558
	os_tid = 0x14f4

	[0052.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 559
	os_tid = 0x14f8

	[0052.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.077] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 560
	os_tid = 0x14fc

	[0052.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.058] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 561
	os_tid = 0x1500

	[0052.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.077] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 562
	os_tid = 0x1504

	[0052.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.078] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 563
	os_tid = 0x1508

	[0052.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.058] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 564
	os_tid = 0x150c

	[0052.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.078] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 565
	os_tid = 0x1510

	[0052.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.079] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 566
	os_tid = 0x1514

	[0052.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.079] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 567
	os_tid = 0x1518

	[0052.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.080] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 568
	os_tid = 0x151c

	[0052.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 569
	os_tid = 0x1520

	[0052.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 570
	os_tid = 0x1524

	[0052.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.060] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 571
	os_tid = 0x1528

	[0052.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.060] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 572
	os_tid = 0x152c

	[0052.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.080] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 573
	os_tid = 0x1530

	[0052.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 574
	os_tid = 0x1534

	[0052.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", dwFileAttributes=0x80) returned 0
	[0053.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 575
	os_tid = 0x1538

	[0052.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", dwFileAttributes=0x80) returned 0
	[0053.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 576
	os_tid = 0x153c

	[0052.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 0
	[0053.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 577
	os_tid = 0x1540

	[0052.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", dwFileAttributes=0x80) returned 0
	[0053.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.062] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 583
	os_tid = 0x1554

	[0053.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x80) returned 0
	[0053.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 584
	os_tid = 0x1558

	[0053.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", dwFileAttributes=0x80) returned 0
	[0053.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 585
	os_tid = 0x155c

	[0053.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", dwFileAttributes=0x80) returned 0
	[0053.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.284] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 586
	os_tid = 0x1560

	[0053.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", dwFileAttributes=0x80) returned 0
	[0053.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 587
	os_tid = 0x1564

	[0053.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", dwFileAttributes=0x80) returned 0
	[0053.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 588
	os_tid = 0x1568

	[0053.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", dwFileAttributes=0x80) returned 0
	[0053.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.287] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 589
	os_tid = 0x156c

	[0053.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", dwFileAttributes=0x80) returned 0
	[0053.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 590
	os_tid = 0x1570

	[0053.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", dwFileAttributes=0x80) returned 0
	[0053.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 591
	os_tid = 0x1574

	[0053.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", dwFileAttributes=0x80) returned 0
	[0053.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.303] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 592
	os_tid = 0x1578

	[0053.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", dwFileAttributes=0x80) returned 0
	[0053.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.304] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 593
	os_tid = 0x157c

	[0053.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", dwFileAttributes=0x80) returned 0
	[0053.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 594
	os_tid = 0x1580

	[0053.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", dwFileAttributes=0x80) returned 0
	[0053.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 595
	os_tid = 0x1584

	[0053.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", dwFileAttributes=0x80) returned 0
	[0053.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.306] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 596
	os_tid = 0x1588

	[0053.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", dwFileAttributes=0x80) returned 0
	[0053.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 597
	os_tid = 0x158c

	[0053.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", dwFileAttributes=0x80) returned 0
	[0053.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 598
	os_tid = 0x1590

	[0053.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", dwFileAttributes=0x80) returned 0
	[0053.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.310] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 599
	os_tid = 0x1594

	[0053.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", dwFileAttributes=0x80) returned 0
	[0053.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.311] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 600
	os_tid = 0x1598

	[0053.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", dwFileAttributes=0x80) returned 0
	[0053.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.322] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 601
	os_tid = 0x159c

	[0053.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", dwFileAttributes=0x80) returned 0
	[0053.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 602
	os_tid = 0x15a0

	[0053.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", dwFileAttributes=0x80) returned 0
	[0053.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 603
	os_tid = 0x15a4

	[0053.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", dwFileAttributes=0x80) returned 0
	[0053.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 604
	os_tid = 0x15a8

	[0053.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", dwFileAttributes=0x80) returned 0
	[0053.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 605
	os_tid = 0x15ac

	[0053.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", dwFileAttributes=0x80) returned 0
	[0053.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 606
	os_tid = 0x15b0

	[0053.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", dwFileAttributes=0x80) returned 0
	[0053.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 607
	os_tid = 0x15b4

	[0053.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", dwFileAttributes=0x80) returned 0
	[0053.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 608
	os_tid = 0x15b8

	[0053.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", dwFileAttributes=0x80) returned 0
	[0053.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 609
	os_tid = 0x15bc

	[0053.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", dwFileAttributes=0x80) returned 0
	[0053.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 610
	os_tid = 0x15c0

	[0053.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", dwFileAttributes=0x80) returned 0
	[0053.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 611
	os_tid = 0x15c4

	[0053.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", dwFileAttributes=0x80) returned 0
	[0053.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 612
	os_tid = 0x15c8

	[0053.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", dwFileAttributes=0x80) returned 0
	[0053.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 613
	os_tid = 0x15cc

	[0053.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", dwFileAttributes=0x80) returned 0
	[0053.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 614
	os_tid = 0x15d0

	[0053.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", dwFileAttributes=0x80) returned 0
	[0053.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 615
	os_tid = 0x15d4

	[0053.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", dwFileAttributes=0x80) returned 0
	[0053.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 616
	os_tid = 0x15dc

	[0053.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", dwFileAttributes=0x80) returned 0
	[0053.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 617
	os_tid = 0x15e0

	[0053.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", dwFileAttributes=0x80) returned 0
	[0053.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.455] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 618
	os_tid = 0x15e4

	[0053.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", dwFileAttributes=0x80) returned 0
	[0053.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.456] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 619
	os_tid = 0x15e8

	[0053.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", dwFileAttributes=0x80) returned 0
	[0053.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 620
	os_tid = 0x15ec

	[0053.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", dwFileAttributes=0x80) returned 0
	[0053.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 621
	os_tid = 0x15f0

	[0053.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", dwFileAttributes=0x80) returned 0
	[0053.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 622
	os_tid = 0x15f4

	[0053.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", dwFileAttributes=0x80) returned 0
	[0053.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.460] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 623
	os_tid = 0x15f8

	[0053.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", dwFileAttributes=0x80) returned 0
	[0053.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 624
	os_tid = 0x15fc

	[0053.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", dwFileAttributes=0x80) returned 0
	[0053.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 625
	os_tid = 0x1600

	[0053.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", dwFileAttributes=0x80) returned 0
	[0053.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.472] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 626
	os_tid = 0x1604

	[0053.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", dwFileAttributes=0x80) returned 0
	[0053.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.472] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 627
	os_tid = 0x1608

	[0053.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", dwFileAttributes=0x80) returned 0
	[0053.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.473] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 628
	os_tid = 0x160c

	[0053.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", dwFileAttributes=0x80) returned 0
	[0053.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.475] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 629
	os_tid = 0x1610

	[0053.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", dwFileAttributes=0x80) returned 0
	[0053.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.476] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 630
	os_tid = 0x1614

	[0053.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", dwFileAttributes=0x80) returned 0
	[0053.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.477] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 631
	os_tid = 0x1618

	[0053.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", dwFileAttributes=0x80) returned 0
	[0053.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 632
	os_tid = 0x161c

	[0053.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", dwFileAttributes=0x80) returned 0
	[0053.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 633
	os_tid = 0x1620

	[0053.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", dwFileAttributes=0x80) returned 0
	[0053.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.479] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 634
	os_tid = 0x1624

	[0053.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", dwFileAttributes=0x80) returned 0
	[0053.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.480] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 635
	os_tid = 0x1628

	[0053.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", dwFileAttributes=0x80) returned 0
	[0053.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.481] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 636
	os_tid = 0x162c

	[0053.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", dwFileAttributes=0x80) returned 0
	[0053.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 637
	os_tid = 0x1630

	[0053.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", dwFileAttributes=0x80) returned 0
	[0053.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 638
	os_tid = 0x1634

	[0053.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", dwFileAttributes=0x80) returned 0
	[0053.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 639
	os_tid = 0x1638

	[0053.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", dwFileAttributes=0x80) returned 0
	[0053.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 640
	os_tid = 0x163c

	[0053.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", dwFileAttributes=0x80) returned 0
	[0053.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 641
	os_tid = 0x1640

	[0053.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", dwFileAttributes=0x80) returned 0
	[0053.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.486] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 642
	os_tid = 0x1644

	[0053.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", dwFileAttributes=0x80) returned 0
	[0053.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 643
	os_tid = 0x1648

	[0053.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", dwFileAttributes=0x80) returned 0
	[0053.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 644
	os_tid = 0x164c

	[0053.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", dwFileAttributes=0x80) returned 0
	[0053.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.490] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 645
	os_tid = 0x1650

	[0053.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", dwFileAttributes=0x80) returned 0
	[0053.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 646
	os_tid = 0x1654

	[0053.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", dwFileAttributes=0x80) returned 0
	[0053.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 647
	os_tid = 0x1658

	[0053.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", dwFileAttributes=0x80) returned 0
	[0053.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 648
	os_tid = 0x165c

	[0053.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", dwFileAttributes=0x80) returned 0
	[0053.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 649
	os_tid = 0x1660

	[0053.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", dwFileAttributes=0x80) returned 0
	[0053.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 650
	os_tid = 0x1664

	[0053.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", dwFileAttributes=0x80) returned 0
	[0053.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.496] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 651
	os_tid = 0x1668

	[0053.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", dwFileAttributes=0x80) returned 0
	[0053.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.496] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 652
	os_tid = 0x166c

	[0053.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", dwFileAttributes=0x80) returned 0
	[0053.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.497] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 653
	os_tid = 0x1670

	[0053.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", dwFileAttributes=0x80) returned 0
	[0053.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 654
	os_tid = 0x1674

	[0053.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", dwFileAttributes=0x80) returned 0
	[0053.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.499] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 655
	os_tid = 0x1678

	[0053.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", dwFileAttributes=0x80) returned 0
	[0053.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 656
	os_tid = 0x167c

	[0053.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", dwFileAttributes=0x80) returned 0
	[0053.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 657
	os_tid = 0x1680

	[0053.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", dwFileAttributes=0x80) returned 0
	[0053.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 658
	os_tid = 0x1684

	[0053.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", dwFileAttributes=0x80) returned 0
	[0053.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 659
	os_tid = 0x1688

	[0053.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", dwFileAttributes=0x80) returned 0
	[0053.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 660
	os_tid = 0x168c

	[0053.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", dwFileAttributes=0x80) returned 0
	[0053.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.504] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 661
	os_tid = 0x1690

	[0053.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", dwFileAttributes=0x80) returned 0
	[0053.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.505] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 662
	os_tid = 0x1694

	[0053.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", dwFileAttributes=0x80) returned 0
	[0053.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.506] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 663
	os_tid = 0x1698

	[0053.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", dwFileAttributes=0x80) returned 0
	[0053.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.506] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 664
	os_tid = 0x169c

	[0053.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", dwFileAttributes=0x80) returned 0
	[0053.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 665
	os_tid = 0x16a0

	[0053.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", dwFileAttributes=0x80) returned 0
	[0053.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.509] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 666
	os_tid = 0x16a4

	[0053.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", dwFileAttributes=0x80) returned 0
	[0053.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.509] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 667
	os_tid = 0x16a8

	[0053.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", dwFileAttributes=0x80) returned 0
	[0053.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.510] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 668
	os_tid = 0x16ac

	[0053.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", dwFileAttributes=0x80) returned 0
	[0053.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.511] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 669
	os_tid = 0x16b0

	[0053.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", dwFileAttributes=0x80) returned 0
	[0053.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.512] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 670
	os_tid = 0x16b4

	[0053.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", dwFileAttributes=0x80) returned 0
	[0053.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.513] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 671
	os_tid = 0x16b8

	[0053.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", dwFileAttributes=0x80) returned 0
	[0053.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.513] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 672
	os_tid = 0x16bc

	[0053.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", dwFileAttributes=0x80) returned 0
	[0053.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.514] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 673
	os_tid = 0x16c0

	[0053.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", dwFileAttributes=0x80) returned 0
	[0053.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.515] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 674
	os_tid = 0x16c4

	[0053.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", dwFileAttributes=0x80) returned 0
	[0053.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.516] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 675
	os_tid = 0x16cc

	[0053.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", dwFileAttributes=0x80) returned 0
	[0053.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.627] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 676
	os_tid = 0x16d0

	[0053.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", dwFileAttributes=0x80) returned 0
	[0053.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.628] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 677
	os_tid = 0x16d4

	[0053.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", dwFileAttributes=0x80) returned 0
	[0053.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.629] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 678
	os_tid = 0x16d8

	[0053.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", dwFileAttributes=0x80) returned 0
	[0053.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.630] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 679
	os_tid = 0x16dc

	[0053.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", dwFileAttributes=0x80) returned 0
	[0053.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 680
	os_tid = 0x16e0

	[0053.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", dwFileAttributes=0x80) returned 0
	[0053.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 681
	os_tid = 0x16e4

	[0053.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", dwFileAttributes=0x80) returned 0
	[0053.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.632] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 682
	os_tid = 0x16e8

	[0053.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", dwFileAttributes=0x80) returned 0
	[0053.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.633] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 683
	os_tid = 0x16ec

	[0053.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", dwFileAttributes=0x80) returned 0
	[0053.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.634] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 684
	os_tid = 0x16f0

	[0053.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", dwFileAttributes=0x80) returned 0
	[0053.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.634] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 685
	os_tid = 0x16f4

	[0053.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", dwFileAttributes=0x80) returned 0
	[0053.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 686
	os_tid = 0x16f8

	[0053.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", dwFileAttributes=0x80) returned 0
	[0053.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 687
	os_tid = 0x16fc

	[0053.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", dwFileAttributes=0x80) returned 0
	[0053.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 688
	os_tid = 0x1700

	[0053.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", dwFileAttributes=0x80) returned 0
	[0053.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.638] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 689
	os_tid = 0x1704

	[0053.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", dwFileAttributes=0x80) returned 0
	[0053.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.639] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 690
	os_tid = 0x1708

	[0053.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", dwFileAttributes=0x80) returned 0
	[0053.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.640] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 691
	os_tid = 0x170c

	[0053.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", dwFileAttributes=0x80) returned 0
	[0053.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 692
	os_tid = 0x1710

	[0053.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", dwFileAttributes=0x80) returned 0
	[0053.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 693
	os_tid = 0x1714

	[0053.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", dwFileAttributes=0x80) returned 0
	[0053.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 694
	os_tid = 0x1718

	[0053.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", dwFileAttributes=0x80) returned 0
	[0053.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.643] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 695
	os_tid = 0x171c

	[0053.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", dwFileAttributes=0x80) returned 0
	[0053.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.645] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 696
	os_tid = 0x1720

	[0053.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", dwFileAttributes=0x80) returned 0
	[0053.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 697
	os_tid = 0x1724

	[0053.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", dwFileAttributes=0x80) returned 0
	[0053.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 698
	os_tid = 0x1728

	[0053.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", dwFileAttributes=0x80) returned 0
	[0053.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 699
	os_tid = 0x172c

	[0053.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", dwFileAttributes=0x80) returned 0
	[0053.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.649] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 700
	os_tid = 0x1730

	[0053.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", dwFileAttributes=0x80) returned 0
	[0053.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.649] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 701
	os_tid = 0x1734

	[0053.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", dwFileAttributes=0x80) returned 0
	[0053.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.650] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 702
	os_tid = 0x1738

	[0053.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", dwFileAttributes=0x80) returned 0
	[0053.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 703
	os_tid = 0x173c

	[0053.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", dwFileAttributes=0x80) returned 0
	[0053.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.652] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 704
	os_tid = 0x1740

	[0053.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", dwFileAttributes=0x80) returned 0
	[0053.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.652] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 705
	os_tid = 0x1744

	[0053.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", dwFileAttributes=0x80) returned 0
	[0053.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 706
	os_tid = 0x1748

	[0053.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", dwFileAttributes=0x80) returned 0
	[0053.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 707
	os_tid = 0x174c

	[0053.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", dwFileAttributes=0x80) returned 0
	[0053.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 708
	os_tid = 0x1750

	[0053.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", dwFileAttributes=0x80) returned 0
	[0053.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.656] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 709
	os_tid = 0x1754

	[0053.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", dwFileAttributes=0x80) returned 0
	[0053.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.657] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 710
	os_tid = 0x1758

	[0053.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", dwFileAttributes=0x80) returned 0
	[0053.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.658] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 711
	os_tid = 0x175c

	[0053.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", dwFileAttributes=0x80) returned 0
	[0053.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.659] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 712
	os_tid = 0x1760

	[0053.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", dwFileAttributes=0x80) returned 0
	[0053.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 713
	os_tid = 0x1764

	[0053.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", dwFileAttributes=0x80) returned 0
	[0053.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 714
	os_tid = 0x1768

	[0053.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", dwFileAttributes=0x80) returned 0
	[0053.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 715
	os_tid = 0x176c

	[0053.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", dwFileAttributes=0x80) returned 0
	[0053.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.662] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 716
	os_tid = 0x1770

	[0053.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", dwFileAttributes=0x80) returned 0
	[0053.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 717
	os_tid = 0x1774

	[0053.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", dwFileAttributes=0x80) returned 0
	[0053.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 718
	os_tid = 0x1778

	[0053.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", dwFileAttributes=0x80) returned 0
	[0053.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 719
	os_tid = 0x177c

	[0053.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", dwFileAttributes=0x80) returned 0
	[0053.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 720
	os_tid = 0x1780

	[0053.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", dwFileAttributes=0x80) returned 0
	[0053.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.777] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 721
	os_tid = 0x1784

	[0053.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", dwFileAttributes=0x80) returned 0
	[0053.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.778] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 722
	os_tid = 0x1788

	[0053.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", dwFileAttributes=0x80) returned 0
	[0053.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.779] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 723
	os_tid = 0x178c

	[0053.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", dwFileAttributes=0x80) returned 0
	[0053.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.780] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 724
	os_tid = 0x1790

	[0053.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", dwFileAttributes=0x80) returned 0
	[0053.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.780] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 725
	os_tid = 0x1794

	[0053.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", dwFileAttributes=0x80) returned 0
	[0053.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 726
	os_tid = 0x1798

	[0053.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", dwFileAttributes=0x80) returned 0
	[0053.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 727
	os_tid = 0x179c

	[0053.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", dwFileAttributes=0x80) returned 0
	[0053.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 728
	os_tid = 0x17a0

	[0053.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", dwFileAttributes=0x80) returned 0
	[0053.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 729
	os_tid = 0x17a4

	[0053.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", dwFileAttributes=0x80) returned 0
	[0053.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 730
	os_tid = 0x17a8

	[0053.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", dwFileAttributes=0x80) returned 0
	[0053.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 731
	os_tid = 0x17ac

	[0053.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", dwFileAttributes=0x80) returned 0
	[0053.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.788] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 732
	os_tid = 0x17b0

	[0053.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", dwFileAttributes=0x80) returned 0
	[0053.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.789] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 733
	os_tid = 0x17b4

	[0053.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", dwFileAttributes=0x80) returned 0
	[0053.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 734
	os_tid = 0x17b8

	[0053.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", dwFileAttributes=0x80) returned 0
	[0053.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.791] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 735
	os_tid = 0x17bc

	[0053.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", dwFileAttributes=0x80) returned 0
	[0053.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.792] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 736
	os_tid = 0x17c0

	[0053.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", dwFileAttributes=0x80) returned 0
	[0053.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.793] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 737
	os_tid = 0x17c4

	[0053.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", dwFileAttributes=0x80) returned 0
	[0053.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.793] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 738
	os_tid = 0x17c8

	[0053.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", dwFileAttributes=0x80) returned 0
	[0053.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.794] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 739
	os_tid = 0x17cc

	[0053.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", dwFileAttributes=0x80) returned 0
	[0053.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 740
	os_tid = 0x17d0

	[0053.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", dwFileAttributes=0x80) returned 0
	[0053.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.806] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 741
	os_tid = 0x17d4

	[0053.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", dwFileAttributes=0x80) returned 0
	[0053.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.807] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 742
	os_tid = 0x17d8

	[0053.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", dwFileAttributes=0x80) returned 0
	[0053.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.808] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 743
	os_tid = 0x17dc

	[0053.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", dwFileAttributes=0x80) returned 0
	[0053.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 744
	os_tid = 0x17e0

	[0053.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", dwFileAttributes=0x80) returned 0
	[0053.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 745
	os_tid = 0x17e4

	[0053.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", dwFileAttributes=0x80) returned 0
	[0053.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 746
	os_tid = 0x17e8

	[0053.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", dwFileAttributes=0x80) returned 0
	[0053.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.812] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 747
	os_tid = 0x17ec

	[0053.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", dwFileAttributes=0x80) returned 0
	[0053.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 748
	os_tid = 0x17f0

	[0053.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", dwFileAttributes=0x80) returned 0
	[0053.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.814] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 749
	os_tid = 0x17f4

	[0053.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", dwFileAttributes=0x80) returned 0
	[0053.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 750
	os_tid = 0x17f8

	[0053.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", dwFileAttributes=0x80) returned 0
	[0053.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 751
	os_tid = 0x17fc

	[0053.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", dwFileAttributes=0x80) returned 0
	[0053.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 752
	os_tid = 0xe38

	[0053.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", dwFileAttributes=0x80) returned 0
	[0053.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 753
	os_tid = 0x1094

	[0053.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", dwFileAttributes=0x80) returned 0
	[0053.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.820] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 754
	os_tid = 0x1804

	[0053.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", dwFileAttributes=0x80) returned 0
	[0053.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.820] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 755
	os_tid = 0x1808

	[0053.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", dwFileAttributes=0x80) returned 0
	[0053.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 756
	os_tid = 0x180c

	[0053.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", dwFileAttributes=0x80) returned 0
	[0053.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 757
	os_tid = 0x1810

	[0053.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", dwFileAttributes=0x80) returned 0
	[0053.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 758
	os_tid = 0x1814

	[0053.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", dwFileAttributes=0x80) returned 0
	[0053.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 759
	os_tid = 0x1818

	[0053.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", dwFileAttributes=0x80) returned 0
	[0053.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 760
	os_tid = 0x181c

	[0053.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", dwFileAttributes=0x80) returned 0
	[0053.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 761
	os_tid = 0x1820

	[0053.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", dwFileAttributes=0x80) returned 0
	[0053.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 762
	os_tid = 0x1824

	[0053.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", dwFileAttributes=0x80) returned 0
	[0053.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 763
	os_tid = 0x1828

	[0053.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", dwFileAttributes=0x80) returned 0
	[0053.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 764
	os_tid = 0x182c

	[0053.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", dwFileAttributes=0x80) returned 0
	[0053.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 765
	os_tid = 0x1830

	[0053.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", dwFileAttributes=0x80) returned 0
	[0053.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 766
	os_tid = 0x1834

	[0053.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", dwFileAttributes=0x80) returned 0
	[0053.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 767
	os_tid = 0x1838

	[0053.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF", dwFileAttributes=0x80) returned 0
	[0053.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 768
	os_tid = 0x183c

	[0053.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF", dwFileAttributes=0x80) returned 0
	[0053.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 769
	os_tid = 0x1840

	[0053.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF", dwFileAttributes=0x80) returned 0
	[0053.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 770
	os_tid = 0x1844

	[0053.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF", dwFileAttributes=0x80) returned 0
	[0053.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 771
	os_tid = 0x1848

	[0054.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF", dwFileAttributes=0x80) returned 0
	[0054.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.089] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 772
	os_tid = 0x184c

	[0054.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF", dwFileAttributes=0x80) returned 0
	[0054.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.090] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 773
	os_tid = 0x1850

	[0054.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF", dwFileAttributes=0x80) returned 0
	[0054.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.091] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 774
	os_tid = 0x1854

	[0054.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF", dwFileAttributes=0x80) returned 0
	[0054.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.092] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 775
	os_tid = 0x1858

	[0054.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF", dwFileAttributes=0x80) returned 0
	[0054.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.094] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 776
	os_tid = 0x185c

	[0054.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF", dwFileAttributes=0x80) returned 0
	[0054.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.095] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 777
	os_tid = 0x1860

	[0054.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF", dwFileAttributes=0x80) returned 0
	[0054.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.096] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 778
	os_tid = 0x1864

	[0054.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF", dwFileAttributes=0x80) returned 0
	[0054.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.097] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 779
	os_tid = 0x1868

	[0054.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF", dwFileAttributes=0x80) returned 0
	[0054.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.098] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 780
	os_tid = 0x186c

	[0054.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF", dwFileAttributes=0x80) returned 0
	[0054.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 781
	os_tid = 0x1870

	[0054.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF", dwFileAttributes=0x80) returned 0
	[0054.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.100] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 782
	os_tid = 0x1874

	[0054.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF", dwFileAttributes=0x80) returned 0
	[0054.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.100] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 783
	os_tid = 0x1878

	[0054.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF", dwFileAttributes=0x80) returned 0
	[0054.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.101] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 784
	os_tid = 0x187c

	[0054.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF", dwFileAttributes=0x80) returned 0
	[0054.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.102] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 785
	os_tid = 0x1880

	[0054.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF", dwFileAttributes=0x80) returned 0
	[0054.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.103] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 786
	os_tid = 0x1884

	[0054.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF", dwFileAttributes=0x80) returned 0
	[0054.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.104] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 787
	os_tid = 0x1888

	[0054.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF", dwFileAttributes=0x80) returned 0
	[0054.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.104] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 788
	os_tid = 0x188c

	[0054.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF", dwFileAttributes=0x80) returned 0
	[0054.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 789
	os_tid = 0x1890

	[0054.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF", dwFileAttributes=0x80) returned 0
	[0054.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 790
	os_tid = 0x1894

	[0054.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF", dwFileAttributes=0x80) returned 0
	[0054.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.108] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 791
	os_tid = 0x1898

	[0054.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF", dwFileAttributes=0x80) returned 0
	[0054.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 792
	os_tid = 0x189c

	[0054.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF", dwFileAttributes=0x80) returned 0
	[0054.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 793
	os_tid = 0x18a0

	[0054.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF", dwFileAttributes=0x80) returned 0
	[0054.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.110] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 794
	os_tid = 0x18a4

	[0054.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF", dwFileAttributes=0x80) returned 0
	[0054.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.111] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 795
	os_tid = 0x18a8

	[0054.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF", dwFileAttributes=0x80) returned 0
	[0054.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.113] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 796
	os_tid = 0x18ac

	[0054.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF", dwFileAttributes=0x80) returned 0
	[0054.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.114] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 797
	os_tid = 0x18b0

	[0054.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF", dwFileAttributes=0x80) returned 0
	[0054.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.115] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 798
	os_tid = 0x18b4

	[0054.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF", dwFileAttributes=0x80) returned 0
	[0054.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 799
	os_tid = 0x18b8

	[0054.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF", dwFileAttributes=0x80) returned 0
	[0054.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 800
	os_tid = 0x18bc

	[0054.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF", dwFileAttributes=0x80) returned 0
	[0054.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.118] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 801
	os_tid = 0x18c0

	[0054.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF", dwFileAttributes=0x80) returned 0
	[0054.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.119] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 802
	os_tid = 0x18c4

	[0054.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF", dwFileAttributes=0x80) returned 0
	[0054.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.120] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 803
	os_tid = 0x18c8

	[0054.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF", dwFileAttributes=0x80) returned 0
	[0054.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 804
	os_tid = 0x18cc

	[0054.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF", dwFileAttributes=0x80) returned 0
	[0054.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 805
	os_tid = 0x18d0

	[0054.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF", dwFileAttributes=0x80) returned 0
	[0054.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 806
	os_tid = 0x18d4

	[0054.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF", dwFileAttributes=0x80) returned 0
	[0054.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.124] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 807
	os_tid = 0x18d8

	[0054.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF", dwFileAttributes=0x80) returned 0
	[0054.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.125] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 808
	os_tid = 0x18dc

	[0054.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF", dwFileAttributes=0x80) returned 0
	[0054.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 809
	os_tid = 0x18e0

	[0054.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF", dwFileAttributes=0x80) returned 0
	[0054.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.128] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 810
	os_tid = 0x18e4

	[0054.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF", dwFileAttributes=0x80) returned 0
	[0054.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.129] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 811
	os_tid = 0x18e8

	[0054.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF", dwFileAttributes=0x80) returned 0
	[0054.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.129] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 812
	os_tid = 0x18ec

	[0054.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF", dwFileAttributes=0x80) returned 0
	[0054.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.130] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 813
	os_tid = 0x18f0

	[0054.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF", dwFileAttributes=0x80) returned 0
	[0054.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.131] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 814
	os_tid = 0x18f4

	[0054.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF", dwFileAttributes=0x80) returned 0
	[0054.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.132] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 815
	os_tid = 0x18f8

	[0054.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF", dwFileAttributes=0x80) returned 0
	[0054.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.134] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 816
	os_tid = 0x18fc

	[0054.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF", dwFileAttributes=0x80) returned 0
	[0054.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.134] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 817
	os_tid = 0x1900

	[0054.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF", dwFileAttributes=0x80) returned 0
	[0054.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.135] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 818
	os_tid = 0x1904

	[0054.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF", dwFileAttributes=0x80) returned 0
	[0054.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.137] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 819
	os_tid = 0x1908

	[0054.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF", dwFileAttributes=0x80) returned 0
	[0054.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.138] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 820
	os_tid = 0x190c

	[0054.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF", dwFileAttributes=0x80) returned 0
	[0054.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.246] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 821
	os_tid = 0x1910

	[0054.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF", dwFileAttributes=0x80) returned 0
	[0054.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.247] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 822
	os_tid = 0x1914

	[0054.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF", dwFileAttributes=0x80) returned 0
	[0054.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.247] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 823
	os_tid = 0x1918

	[0054.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF", dwFileAttributes=0x80) returned 0
	[0054.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.249] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 824
	os_tid = 0x191c

	[0054.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF", dwFileAttributes=0x80) returned 0
	[0054.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.250] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 825
	os_tid = 0x1920

	[0054.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID", dwFileAttributes=0x80) returned 0
	[0054.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 826
	os_tid = 0x1924

	[0054.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF", dwFileAttributes=0x80) returned 0
	[0054.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.252] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 827
	os_tid = 0x1928

	[0054.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF", dwFileAttributes=0x80) returned 0
	[0054.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.253] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 828
	os_tid = 0x192c

	[0054.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF", dwFileAttributes=0x80) returned 0
	[0054.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.255] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 829
	os_tid = 0x1930

	[0054.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF", dwFileAttributes=0x80) returned 0
	[0054.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.255] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 830
	os_tid = 0x1934

	[0054.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF", dwFileAttributes=0x80) returned 0
	[0054.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.257] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 831
	os_tid = 0x1938

	[0054.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF", dwFileAttributes=0x80) returned 0
	[0054.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.258] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 832
	os_tid = 0x193c

	[0054.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF", dwFileAttributes=0x80) returned 0
	[0054.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 833
	os_tid = 0x1940

	[0054.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF", dwFileAttributes=0x80) returned 0
	[0054.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 834
	os_tid = 0x1944

	[0054.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF", dwFileAttributes=0x80) returned 0
	[0054.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.260] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 835
	os_tid = 0x1948

	[0054.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF", dwFileAttributes=0x80) returned 0
	[0054.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.262] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 836
	os_tid = 0x194c

	[0054.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF", dwFileAttributes=0x80) returned 0
	[0054.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.262] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 837
	os_tid = 0x1950

	[0054.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF", dwFileAttributes=0x80) returned 0
	[0054.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.264] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 838
	os_tid = 0x1954

	[0054.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID", dwFileAttributes=0x80) returned 0
	[0054.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.265] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 839
	os_tid = 0x1958

	[0054.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID", dwFileAttributes=0x80) returned 0
	[0054.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.265] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 840
	os_tid = 0x195c

	[0054.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF", dwFileAttributes=0x80) returned 0
	[0054.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.267] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 841
	os_tid = 0x1960

	[0054.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF", dwFileAttributes=0x80) returned 0
	[0054.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.267] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 842
	os_tid = 0x1964

	[0054.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF", dwFileAttributes=0x80) returned 0
	[0054.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.268] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 843
	os_tid = 0x1968

	[0054.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF", dwFileAttributes=0x80) returned 0
	[0054.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.270] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 844
	os_tid = 0x196c

	[0054.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF", dwFileAttributes=0x80) returned 0
	[0054.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.270] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 845
	os_tid = 0x1970

	[0054.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF", dwFileAttributes=0x80) returned 0
	[0054.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.272] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 846
	os_tid = 0x1974

	[0054.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF", dwFileAttributes=0x80) returned 0
	[0054.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.273] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 847
	os_tid = 0x1978

	[0054.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF", dwFileAttributes=0x80) returned 0
	[0054.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.273] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 848
	os_tid = 0x197c

	[0054.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF", dwFileAttributes=0x80) returned 0
	[0054.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.274] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 849
	os_tid = 0x1980

	[0054.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF", dwFileAttributes=0x80) returned 0
	[0054.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 850
	os_tid = 0x1984

	[0054.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF", dwFileAttributes=0x80) returned 0
	[0054.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 851
	os_tid = 0x1988

	[0054.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF", dwFileAttributes=0x80) returned 0
	[0054.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.277] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 852
	os_tid = 0x198c

	[0054.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF", dwFileAttributes=0x80) returned 0
	[0054.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.278] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 853
	os_tid = 0x1990

	[0054.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF", dwFileAttributes=0x80) returned 0
	[0054.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.279] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 854
	os_tid = 0x1994

	[0054.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF", dwFileAttributes=0x80) returned 0
	[0054.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 855
	os_tid = 0x1998

	[0054.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF", dwFileAttributes=0x80) returned 0
	[0054.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.281] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 856
	os_tid = 0x199c

	[0054.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF", dwFileAttributes=0x80) returned 0
	[0054.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 857
	os_tid = 0x19a0

	[0054.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF", dwFileAttributes=0x80) returned 0
	[0054.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.284] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 858
	os_tid = 0x19a4

	[0054.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF", dwFileAttributes=0x80) returned 0
	[0054.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.284] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 859
	os_tid = 0x19a8

	[0054.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF", dwFileAttributes=0x80) returned 0
	[0054.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 860
	os_tid = 0x19ac

	[0054.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF", dwFileAttributes=0x80) returned 0
	[0054.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.287] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 861
	os_tid = 0x19b0

	[0054.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF", dwFileAttributes=0x80) returned 0
	[0054.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 862
	os_tid = 0x19b4

	[0054.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF", dwFileAttributes=0x80) returned 0
	[0054.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 863
	os_tid = 0x19b8

	[0054.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF", dwFileAttributes=0x80) returned 0
	[0054.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 864
	os_tid = 0x19bc

	[0054.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF", dwFileAttributes=0x80) returned 0
	[0054.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 865
	os_tid = 0x19c0

	[0054.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF", dwFileAttributes=0x80) returned 0
	[0054.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 866
	os_tid = 0x19c4

	[0054.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF", dwFileAttributes=0x80) returned 0
	[0054.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 867
	os_tid = 0x19c8

	[0054.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF", dwFileAttributes=0x80) returned 0
	[0054.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 868
	os_tid = 0x19cc

	[0054.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF", dwFileAttributes=0x80) returned 0
	[0054.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.401] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 869
	os_tid = 0x19d0

	[0054.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF", dwFileAttributes=0x80) returned 0
	[0054.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 870
	os_tid = 0x19d4

	[0054.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF", dwFileAttributes=0x80) returned 0
	[0054.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.404] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 871
	os_tid = 0x19d8

	[0054.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF", dwFileAttributes=0x80) returned 0
	[0054.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 872
	os_tid = 0x19dc

	[0054.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF", dwFileAttributes=0x80) returned 0
	[0054.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 873
	os_tid = 0x19e0

	[0054.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF", dwFileAttributes=0x80) returned 0
	[0054.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 874
	os_tid = 0x19e4

	[0054.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF", dwFileAttributes=0x80) returned 0
	[0054.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 875
	os_tid = 0x19e8

	[0054.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF", dwFileAttributes=0x80) returned 0
	[0054.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 876
	os_tid = 0x19ec

	[0054.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF", dwFileAttributes=0x80) returned 0
	[0054.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 877
	os_tid = 0x19f0

	[0054.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF", dwFileAttributes=0x80) returned 0
	[0054.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 878
	os_tid = 0x19f4

	[0054.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF", dwFileAttributes=0x80) returned 0
	[0054.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 879
	os_tid = 0x19f8

	[0054.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF", dwFileAttributes=0x80) returned 0
	[0054.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 880
	os_tid = 0x19fc

	[0054.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF", dwFileAttributes=0x80) returned 0
	[0054.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 881
	os_tid = 0x1a00

	[0054.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF", dwFileAttributes=0x80) returned 0
	[0054.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 882
	os_tid = 0x1a04

	[0054.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF", dwFileAttributes=0x80) returned 0
	[0054.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.415] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 883
	os_tid = 0x1a08

	[0054.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF", dwFileAttributes=0x80) returned 0
	[0054.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 884
	os_tid = 0x1a0c

	[0054.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF", dwFileAttributes=0x80) returned 0
	[0054.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.417] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 885
	os_tid = 0x1a10

	[0054.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF", dwFileAttributes=0x80) returned 0
	[0054.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 886
	os_tid = 0x1a14

	[0054.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF", dwFileAttributes=0x80) returned 0
	[0054.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 887
	os_tid = 0x1a18

	[0054.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF", dwFileAttributes=0x80) returned 0
	[0054.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 888
	os_tid = 0x1a1c

	[0054.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF", dwFileAttributes=0x80) returned 0
	[0054.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 889
	os_tid = 0x1a20

	[0054.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF", dwFileAttributes=0x80) returned 0
	[0054.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.422] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 890
	os_tid = 0x1a24

	[0054.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF", dwFileAttributes=0x80) returned 0
	[0054.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 891
	os_tid = 0x1a28

	[0054.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF", dwFileAttributes=0x80) returned 0
	[0054.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 892
	os_tid = 0x1a2c

	[0054.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF", dwFileAttributes=0x80) returned 0
	[0054.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 893
	os_tid = 0x1a30

	[0054.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID", dwFileAttributes=0x80) returned 0
	[0054.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 894
	os_tid = 0x1a34

	[0054.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID", dwFileAttributes=0x80) returned 0
	[0054.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 895
	os_tid = 0x1a38

	[0054.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF", dwFileAttributes=0x80) returned 0
	[0054.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 896
	os_tid = 0x1a3c

	[0054.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID", dwFileAttributes=0x80) returned 0
	[0054.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 897
	os_tid = 0x1a40

	[0054.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID", dwFileAttributes=0x80) returned 0
	[0054.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 898
	os_tid = 0x1a44

	[0054.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF", dwFileAttributes=0x80) returned 0
	[0054.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 899
	os_tid = 0x1a48

	[0054.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF", dwFileAttributes=0x80) returned 0
	[0054.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 900
	os_tid = 0x1a4c

	[0054.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF", dwFileAttributes=0x80) returned 0
	[0054.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 901
	os_tid = 0x1a50

	[0054.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF", dwFileAttributes=0x80) returned 0
	[0054.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 902
	os_tid = 0x1a54

	[0054.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF", dwFileAttributes=0x80) returned 0
	[0054.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 903
	os_tid = 0x1a58

	[0054.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF", dwFileAttributes=0x80) returned 0
	[0054.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.435] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 904
	os_tid = 0x1a5c

	[0054.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF", dwFileAttributes=0x80) returned 0
	[0054.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.436] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 905
	os_tid = 0x1a60

	[0054.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF", dwFileAttributes=0x80) returned 0
	[0054.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 906
	os_tid = 0x1a64

	[0054.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF", dwFileAttributes=0x80) returned 0
	[0054.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.520] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 907
	os_tid = 0x1a68

	[0054.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF", dwFileAttributes=0x80) returned 0
	[0054.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 908
	os_tid = 0x1a6c

	[0054.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF", dwFileAttributes=0x80) returned 0
	[0054.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 909
	os_tid = 0x1a70

	[0054.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF", dwFileAttributes=0x80) returned 0
	[0054.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.523] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 910
	os_tid = 0x1a74

	[0054.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF", dwFileAttributes=0x80) returned 0
	[0054.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.525] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 911
	os_tid = 0x1a78

	[0054.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF", dwFileAttributes=0x80) returned 0
	[0054.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.525] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 912
	os_tid = 0x1a7c

	[0054.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF", dwFileAttributes=0x80) returned 0
	[0054.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.526] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 913
	os_tid = 0x1a80

	[0054.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF", dwFileAttributes=0x80) returned 0
	[0054.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.529] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 914
	os_tid = 0x1a84

	[0054.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF", dwFileAttributes=0x80) returned 0
	[0054.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.530] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 915
	os_tid = 0x1a88

	[0054.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF", dwFileAttributes=0x80) returned 0
	[0054.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.532] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 916
	os_tid = 0x1a8c

	[0054.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF", dwFileAttributes=0x80) returned 0
	[0054.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.533] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 917
	os_tid = 0x1a90

	[0054.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF", dwFileAttributes=0x80) returned 0
	[0054.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.533] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 918
	os_tid = 0x1a94

	[0054.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF", dwFileAttributes=0x80) returned 0
	[0054.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.534] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 919
	os_tid = 0x1a98

	[0054.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF", dwFileAttributes=0x80) returned 0
	[0054.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.536] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 920
	os_tid = 0x1a9c

	[0054.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF", dwFileAttributes=0x80) returned 0
	[0054.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.536] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 921
	os_tid = 0x1aa0

	[0054.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF", dwFileAttributes=0x80) returned 0
	[0054.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.537] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 922
	os_tid = 0x1aa4

	[0054.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF", dwFileAttributes=0x80) returned 0
	[0054.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.538] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 923
	os_tid = 0x1aa8

	[0054.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF", dwFileAttributes=0x80) returned 0
	[0054.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.539] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 924
	os_tid = 0x1aac

	[0054.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF", dwFileAttributes=0x80) returned 0
	[0054.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.540] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 925
	os_tid = 0x1ab0

	[0054.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF", dwFileAttributes=0x80) returned 0
	[0054.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.541] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 926
	os_tid = 0x1ab4

	[0054.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF", dwFileAttributes=0x80) returned 0
	[0054.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.542] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 927
	os_tid = 0x1ab8

	[0054.543] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF", dwFileAttributes=0x80) returned 0
	[0054.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.543] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 928
	os_tid = 0x1abc

	[0054.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF", dwFileAttributes=0x80) returned 0
	[0054.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.544] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 929
	os_tid = 0x1ac0

	[0054.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF", dwFileAttributes=0x80) returned 0
	[0054.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.545] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 930
	os_tid = 0x1ac4

	[0054.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF", dwFileAttributes=0x80) returned 0
	[0054.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.546] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 931
	os_tid = 0x1ac8

	[0054.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF", dwFileAttributes=0x80) returned 0
	[0054.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.547] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 932
	os_tid = 0x1acc

	[0054.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF", dwFileAttributes=0x80) returned 0
	[0054.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 933
	os_tid = 0x1ad0

	[0054.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF", dwFileAttributes=0x80) returned 0
	[0054.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.549] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 934
	os_tid = 0x1ad4

	[0054.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF", dwFileAttributes=0x80) returned 0
	[0054.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.550] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 935
	os_tid = 0x1ad8

	[0054.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF", dwFileAttributes=0x80) returned 0
	[0054.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 936
	os_tid = 0x1adc

	[0054.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF", dwFileAttributes=0x80) returned 0
	[0054.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.553] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 937
	os_tid = 0x1ae0

	[0054.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF", dwFileAttributes=0x80) returned 0
	[0054.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.554] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 938
	os_tid = 0x1ae4

	[0054.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF", dwFileAttributes=0x80) returned 0
	[0054.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 939
	os_tid = 0x1ae8

	[0054.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF", dwFileAttributes=0x80) returned 0
	[0054.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 940
	os_tid = 0x1aec

	[0054.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF", dwFileAttributes=0x80) returned 0
	[0054.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 941
	os_tid = 0x1af0

	[0054.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF", dwFileAttributes=0x80) returned 0
	[0054.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.558] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 942
	os_tid = 0x1af4

	[0054.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF", dwFileAttributes=0x80) returned 0
	[0054.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.559] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 943
	os_tid = 0x1af8

	[0054.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF", dwFileAttributes=0x80) returned 0
	[0054.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.560] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 944
	os_tid = 0x1afc

	[0054.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF", dwFileAttributes=0x80) returned 0
	[0054.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.561] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 945
	os_tid = 0x1b00

	[0054.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF", dwFileAttributes=0x80) returned 0
	[0054.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 946
	os_tid = 0x1b04

	[0054.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF", dwFileAttributes=0x80) returned 0
	[0054.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.563] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 947
	os_tid = 0x1b08

	[0054.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF", dwFileAttributes=0x80) returned 0
	[0054.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 948
	os_tid = 0x1b0c

	[0054.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF", dwFileAttributes=0x80) returned 0
	[0054.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.565] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 949
	os_tid = 0x1b10

	[0054.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID", dwFileAttributes=0x80) returned 0
	[0054.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 950
	os_tid = 0x1b14

	[0054.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF", dwFileAttributes=0x80) returned 0
	[0054.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.567] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 951
	os_tid = 0x1b18

	[0054.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF", dwFileAttributes=0x80) returned 0
	[0054.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 952
	os_tid = 0x1b1c

	[0054.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF", dwFileAttributes=0x80) returned 0
	[0054.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 953
	os_tid = 0x1b20

	[0054.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF", dwFileAttributes=0x80) returned 0
	[0054.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 954
	os_tid = 0x1b24

	[0054.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF", dwFileAttributes=0x80) returned 0
	[0054.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.570] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 955
	os_tid = 0x1b28

	[0054.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF", dwFileAttributes=0x80) returned 0
	[0054.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 956
	os_tid = 0x1b2c

	[0054.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF", dwFileAttributes=0x80) returned 0
	[0054.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.683] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 957
	os_tid = 0x1b30

	[0054.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF", dwFileAttributes=0x80) returned 0
	[0054.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 958
	os_tid = 0x1b34

	[0054.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF", dwFileAttributes=0x80) returned 0
	[0054.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 959
	os_tid = 0x1b38

	[0054.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF", dwFileAttributes=0x80) returned 0
	[0054.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 960
	os_tid = 0x1b3c

	[0054.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF", dwFileAttributes=0x80) returned 0
	[0054.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 961
	os_tid = 0x1b40

	[0054.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF", dwFileAttributes=0x80) returned 0
	[0054.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 962
	os_tid = 0x1b44

	[0054.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF", dwFileAttributes=0x80) returned 0
	[0054.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 963
	os_tid = 0x1b48

	[0054.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID", dwFileAttributes=0x80) returned 0
	[0054.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 964
	os_tid = 0x1b4c

	[0054.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF", dwFileAttributes=0x80) returned 0
	[0054.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 965
	os_tid = 0x1b50

	[0054.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF", dwFileAttributes=0x80) returned 0
	[0054.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 966
	os_tid = 0x1b54

	[0054.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF", dwFileAttributes=0x80) returned 0
	[0054.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 967
	os_tid = 0x1b58

	[0054.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF", dwFileAttributes=0x80) returned 0
	[0054.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 968
	os_tid = 0x1b5c

	[0054.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF", dwFileAttributes=0x80) returned 0
	[0054.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 969
	os_tid = 0x1b60

	[0054.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF", dwFileAttributes=0x80) returned 0
	[0054.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 970
	os_tid = 0x1b64

	[0054.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF", dwFileAttributes=0x80) returned 0
	[0054.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 971
	os_tid = 0x1b68

	[0054.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF", dwFileAttributes=0x80) returned 0
	[0054.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 972
	os_tid = 0x1b6c

	[0054.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF", dwFileAttributes=0x80) returned 0
	[0054.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 973
	os_tid = 0x1b70

	[0054.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF", dwFileAttributes=0x80) returned 0
	[0054.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 974
	os_tid = 0x1b74

	[0054.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF", dwFileAttributes=0x80) returned 0
	[0054.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 975
	os_tid = 0x1b78

	[0054.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF", dwFileAttributes=0x80) returned 0
	[0054.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 976
	os_tid = 0x1b7c

	[0054.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF", dwFileAttributes=0x80) returned 0
	[0054.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 977
	os_tid = 0x1b80

	[0054.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF", dwFileAttributes=0x80) returned 0
	[0054.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.704] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 978
	os_tid = 0x1b84

	[0054.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF", dwFileAttributes=0x80) returned 0
	[0054.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.705] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 979
	os_tid = 0x1b88

	[0054.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF", dwFileAttributes=0x80) returned 0
	[0054.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.706] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 980
	os_tid = 0x1b8c

	[0054.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF", dwFileAttributes=0x80) returned 0
	[0054.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.707] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 981
	os_tid = 0x1b90

	[0054.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF", dwFileAttributes=0x80) returned 0
	[0054.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 982
	os_tid = 0x1b94

	[0054.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF", dwFileAttributes=0x80) returned 0
	[0054.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 983
	os_tid = 0x1b98

	[0054.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF", dwFileAttributes=0x80) returned 0
	[0054.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.709] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 984
	os_tid = 0x1b9c

	[0054.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF", dwFileAttributes=0x80) returned 0
	[0054.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.710] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 985
	os_tid = 0x1ba0

	[0054.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG", dwFileAttributes=0x80) returned 0
	[0054.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.711] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 986
	os_tid = 0x1ba4

	[0054.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF", dwFileAttributes=0x80) returned 0
	[0054.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.712] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 987
	os_tid = 0x1ba8

	[0054.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG", dwFileAttributes=0x80) returned 0
	[0054.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.714] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 988
	os_tid = 0x1bac

	[0054.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG", dwFileAttributes=0x80) returned 0
	[0054.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.715] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 989
	os_tid = 0x1bb0

	[0054.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF", dwFileAttributes=0x80) returned 0
	[0054.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 990
	os_tid = 0x1bb4

	[0054.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG", dwFileAttributes=0x80) returned 0
	[0054.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.717] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 991
	os_tid = 0x1bb8

	[0054.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF", dwFileAttributes=0x80) returned 0
	[0054.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 992
	os_tid = 0x1bbc

	[0054.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG", dwFileAttributes=0x80) returned 0
	[0054.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.719] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 993
	os_tid = 0x1bc0

	[0054.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF", dwFileAttributes=0x80) returned 0
	[0054.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 994
	os_tid = 0x1bc4

	[0054.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG", dwFileAttributes=0x80) returned 0
	[0054.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.721] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 995
	os_tid = 0x1bc8

	[0054.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG", dwFileAttributes=0x80) returned 0
	[0054.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.722] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 996
	os_tid = 0x1bcc

	[0054.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG", dwFileAttributes=0x80) returned 0
	[0054.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 997
	os_tid = 0x1bd0

	[0054.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG", dwFileAttributes=0x80) returned 0
	[0054.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.724] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 998
	os_tid = 0x1bd4

	[0054.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF", dwFileAttributes=0x80) returned 0
	[0054.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.725] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 999
	os_tid = 0x1bd8

	[0054.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF", dwFileAttributes=0x80) returned 0
	[0054.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.726] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1000
	os_tid = 0x1bdc

	[0054.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG", dwFileAttributes=0x80) returned 0
	[0054.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.727] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1001
	os_tid = 0x1be0

	[0054.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG", dwFileAttributes=0x80) returned 0
	[0054.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.729] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1002
	os_tid = 0x1be4

	[0054.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG", dwFileAttributes=0x80) returned 0
	[0054.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1003
	os_tid = 0x1be8

	[0054.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF", dwFileAttributes=0x80) returned 0
	[0054.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1004
	os_tid = 0x1bec

	[0054.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF", dwFileAttributes=0x80) returned 0
	[0054.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1005
	os_tid = 0x1bf0

	[0054.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG", dwFileAttributes=0x80) returned 0
	[0054.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1006
	os_tid = 0x1bf4

	[0054.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG", dwFileAttributes=0x80) returned 0
	[0054.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1007
	os_tid = 0x1bf8

	[0054.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG", dwFileAttributes=0x80) returned 0
	[0054.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1008
	os_tid = 0x1bfc

	[0054.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG", dwFileAttributes=0x80) returned 0
	[0054.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1009
	os_tid = 0x8ac

	[0054.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF", dwFileAttributes=0x80) returned 0
	[0054.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1010
	os_tid = 0x1c04

	[0054.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF", dwFileAttributes=0x80) returned 0
	[0054.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1011
	os_tid = 0x1c08

	[0054.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF", dwFileAttributes=0x80) returned 0
	[0054.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1012
	os_tid = 0x1c0c

	[0054.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF", dwFileAttributes=0x80) returned 0
	[0054.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1013
	os_tid = 0x1c10

	[0054.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF", dwFileAttributes=0x80) returned 0
	[0054.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1014
	os_tid = 0x1c14

	[0054.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF", dwFileAttributes=0x80) returned 0
	[0054.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1015
	os_tid = 0x1c18

	[0054.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF", dwFileAttributes=0x80) returned 0
	[0054.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1016
	os_tid = 0x1c1c

	[0054.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF", dwFileAttributes=0x80) returned 0
	[0054.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1017
	os_tid = 0x1c20

	[0054.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF", dwFileAttributes=0x80) returned 0
	[0054.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1018
	os_tid = 0x1c24

	[0054.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF", dwFileAttributes=0x80) returned 0
	[0054.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1019
	os_tid = 0x1c28

	[0054.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF", dwFileAttributes=0x80) returned 0
	[0054.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1020
	os_tid = 0x1c2c

	[0054.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF", dwFileAttributes=0x80) returned 0
	[0054.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1021
	os_tid = 0x1c30

	[0054.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF", dwFileAttributes=0x80) returned 0
	[0054.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1022
	os_tid = 0x1c34

	[0054.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF", dwFileAttributes=0x80) returned 0
	[0054.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1023
	os_tid = 0x1c38

	[0054.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF", dwFileAttributes=0x80) returned 0
	[0054.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1024
	os_tid = 0x1c3c

	[0054.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF", dwFileAttributes=0x80) returned 0
	[0054.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.839] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1025
	os_tid = 0x1c40

	[0054.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG", dwFileAttributes=0x80) returned 0
	[0054.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1026
	os_tid = 0x1c44

	[0054.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG", dwFileAttributes=0x80) returned 0
	[0054.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.842] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1027
	os_tid = 0x1c48

	[0054.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG", dwFileAttributes=0x80) returned 0
	[0054.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.843] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1028
	os_tid = 0x1c4c

	[0054.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG", dwFileAttributes=0x80) returned 0
	[0054.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.844] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1029
	os_tid = 0x1c50

	[0054.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG", dwFileAttributes=0x80) returned 0
	[0054.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.845] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1030
	os_tid = 0x1c54

	[0054.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG", dwFileAttributes=0x80) returned 0
	[0054.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.846] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1031
	os_tid = 0x1c58

	[0054.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG", dwFileAttributes=0x80) returned 0
	[0054.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1032
	os_tid = 0x1c5c

	[0054.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF", dwFileAttributes=0x80) returned 0
	[0054.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.848] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1033
	os_tid = 0x1c60

	[0054.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF", dwFileAttributes=0x80) returned 0
	[0054.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.849] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1034
	os_tid = 0x1c64

	[0054.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF", dwFileAttributes=0x80) returned 0
	[0054.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.850] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1035
	os_tid = 0x1c68

	[0054.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF", dwFileAttributes=0x80) returned 0
	[0054.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.853] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1036
	os_tid = 0x1c6c

	[0054.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF", dwFileAttributes=0x80) returned 0
	[0054.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.854] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1037
	os_tid = 0x1c70

	[0054.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF", dwFileAttributes=0x80) returned 0
	[0054.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.855] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1038
	os_tid = 0x1c74

	[0054.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF", dwFileAttributes=0x80) returned 0
	[0054.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.856] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1039
	os_tid = 0x1c78

	[0054.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF", dwFileAttributes=0x80) returned 0
	[0054.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.857] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1040
	os_tid = 0x1c7c

	[0054.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF", dwFileAttributes=0x80) returned 0
	[0054.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1041
	os_tid = 0x1c80

	[0054.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF", dwFileAttributes=0x80) returned 0
	[0054.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.859] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1042
	os_tid = 0x1c84

	[0054.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF", dwFileAttributes=0x80) returned 0
	[0054.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.859] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1043
	os_tid = 0x1c88

	[0054.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF", dwFileAttributes=0x80) returned 0
	[0054.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.861] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1044
	os_tid = 0x1c8c

	[0054.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF", dwFileAttributes=0x80) returned 0
	[0054.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.862] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1045
	os_tid = 0x1c90

	[0054.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF", dwFileAttributes=0x80) returned 0
	[0054.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.863] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1046
	os_tid = 0x1c94

	[0054.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP", dwFileAttributes=0x80) returned 0
	[0054.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.864] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1047
	os_tid = 0x1c98

	[0054.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP", dwFileAttributes=0x80) returned 0
	[0054.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.866] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1048
	os_tid = 0x1c9c

	[0054.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP", dwFileAttributes=0x80) returned 0
	[0054.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.869] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1049
	os_tid = 0x1ca0

	[0054.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP", dwFileAttributes=0x80) returned 0
	[0054.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1050
	os_tid = 0x1ca4

	[0054.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP", dwFileAttributes=0x80) returned 0
	[0054.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.872] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1051
	os_tid = 0x1ca8

	[0054.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP", dwFileAttributes=0x80) returned 0
	[0054.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.873] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1052
	os_tid = 0x1cac

	[0054.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP", dwFileAttributes=0x80) returned 0
	[0054.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1053
	os_tid = 0x1cb0

	[0055.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP", dwFileAttributes=0x80) returned 0
	[0055.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1054
	os_tid = 0x1cb4

	[0055.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP", dwFileAttributes=0x80) returned 0
	[0055.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.122] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1055
	os_tid = 0x1cb8

	[0055.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP", dwFileAttributes=0x80) returned 0
	[0055.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1056
	os_tid = 0x1cbc

	[0055.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP", dwFileAttributes=0x80) returned 0
	[0055.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.124] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1057
	os_tid = 0x1cc0

	[0055.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP", dwFileAttributes=0x80) returned 0
	[0055.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.125] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1058
	os_tid = 0x1cc4

	[0055.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF", dwFileAttributes=0x80) returned 0
	[0055.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1059
	os_tid = 0x1cc8

	[0055.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF", dwFileAttributes=0x80) returned 0
	[0055.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.128] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1060
	os_tid = 0x1ccc

	[0055.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF", dwFileAttributes=0x80) returned 0
	[0055.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.130] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1061
	os_tid = 0x1cd0

	[0055.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF", dwFileAttributes=0x80) returned 0
	[0055.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.131] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1062
	os_tid = 0x1cd4

	[0055.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF", dwFileAttributes=0x80) returned 0
	[0055.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.132] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1063
	os_tid = 0x1cd8

	[0055.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF", dwFileAttributes=0x80) returned 0
	[0055.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.133] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1064
	os_tid = 0x1cdc

	[0055.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF", dwFileAttributes=0x80) returned 0
	[0055.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.134] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1065
	os_tid = 0x1ce0

	[0055.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF", dwFileAttributes=0x80) returned 0
	[0055.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.136] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1066
	os_tid = 0x1ce4

	[0055.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF", dwFileAttributes=0x80) returned 0
	[0055.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.137] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1067
	os_tid = 0x1ce8

	[0055.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF", dwFileAttributes=0x80) returned 0
	[0055.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.138] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1068
	os_tid = 0x1cec

	[0055.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF", dwFileAttributes=0x80) returned 0
	[0055.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.139] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1069
	os_tid = 0x1cf0

	[0055.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF", dwFileAttributes=0x80) returned 0
	[0055.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.140] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1070
	os_tid = 0x1cf4

	[0055.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF", dwFileAttributes=0x80) returned 0
	[0055.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.141] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1071
	os_tid = 0x1cf8

	[0055.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF", dwFileAttributes=0x80) returned 0
	[0055.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.142] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1072
	os_tid = 0x1cfc

	[0055.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF", dwFileAttributes=0x80) returned 0
	[0055.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.143] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1073
	os_tid = 0x1d00

	[0055.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF", dwFileAttributes=0x80) returned 0
	[0055.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.144] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1074
	os_tid = 0x1d04

	[0055.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF", dwFileAttributes=0x80) returned 0
	[0055.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.144] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1075
	os_tid = 0x1d08

	[0055.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF", dwFileAttributes=0x80) returned 0
	[0055.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.146] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1076
	os_tid = 0x1d0c

	[0055.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF", dwFileAttributes=0x80) returned 0
	[0055.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.147] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1077
	os_tid = 0x1d10

	[0055.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF", dwFileAttributes=0x80) returned 0
	[0055.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.148] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1078
	os_tid = 0x1d14

	[0055.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF", dwFileAttributes=0x80) returned 0
	[0055.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1079
	os_tid = 0x1d18

	[0055.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF", dwFileAttributes=0x80) returned 0
	[0055.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1080
	os_tid = 0x1d1c

	[0055.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF", dwFileAttributes=0x80) returned 0
	[0055.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1081
	os_tid = 0x1d20

	[0055.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF", dwFileAttributes=0x80) returned 0
	[0055.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1082
	os_tid = 0x1d24

	[0055.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF", dwFileAttributes=0x80) returned 0
	[0055.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.153] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1083
	os_tid = 0x1d28

	[0055.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF", dwFileAttributes=0x80) returned 0
	[0055.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1084
	os_tid = 0x1d2c

	[0055.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF", dwFileAttributes=0x80) returned 0
	[0055.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1085
	os_tid = 0x1d30

	[0055.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF", dwFileAttributes=0x80) returned 0
	[0055.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1086
	os_tid = 0x1d34

	[0055.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF", dwFileAttributes=0x80) returned 0
	[0055.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1087
	os_tid = 0x1d38

	[0055.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF", dwFileAttributes=0x80) returned 0
	[0055.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1088
	os_tid = 0x1d3c

	[0055.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF", dwFileAttributes=0x80) returned 0
	[0055.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.159] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1089
	os_tid = 0x1d40

	[0055.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF", dwFileAttributes=0x80) returned 0
	[0055.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.160] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1090
	os_tid = 0x1d44

	[0055.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF", dwFileAttributes=0x80) returned 0
	[0055.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1091
	os_tid = 0x1d48

	[0055.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF", dwFileAttributes=0x80) returned 0
	[0055.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1092
	os_tid = 0x1d4c

	[0055.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF", dwFileAttributes=0x80) returned 0
	[0055.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1093
	os_tid = 0x1d50

	[0055.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF", dwFileAttributes=0x80) returned 0
	[0055.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.163] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1094
	os_tid = 0x1d54

	[0055.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF", dwFileAttributes=0x80) returned 0
	[0055.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1095
	os_tid = 0x1d58

	[0055.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF", dwFileAttributes=0x80) returned 0
	[0055.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1096
	os_tid = 0x1d5c

	[0055.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF", dwFileAttributes=0x80) returned 0
	[0055.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1097
	os_tid = 0x1d60

	[0055.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF", dwFileAttributes=0x80) returned 0
	[0055.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1098
	os_tid = 0x1d64

	[0055.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF", dwFileAttributes=0x80) returned 0
	[0055.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1099
	os_tid = 0x1d68

	[0055.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF", dwFileAttributes=0x80) returned 0
	[0055.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1100
	os_tid = 0x1d6c

	[0055.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF", dwFileAttributes=0x80) returned 0
	[0055.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1101
	os_tid = 0x1d70

	[0055.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF", dwFileAttributes=0x80) returned 0
	[0055.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1102
	os_tid = 0x1d74

	[0055.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF", dwFileAttributes=0x80) returned 0
	[0055.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1103
	os_tid = 0x1d78

	[0055.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF", dwFileAttributes=0x80) returned 0
	[0055.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1104
	os_tid = 0x1d7c

	[0055.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF", dwFileAttributes=0x80) returned 0
	[0055.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1105
	os_tid = 0x1d80

	[0055.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF", dwFileAttributes=0x80) returned 0
	[0055.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1106
	os_tid = 0x1d84

	[0055.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF", dwFileAttributes=0x80) returned 0
	[0055.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1107
	os_tid = 0x1d88

	[0055.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF", dwFileAttributes=0x80) returned 0
	[0055.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1108
	os_tid = 0x1d8c

	[0055.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF", dwFileAttributes=0x80) returned 0
	[0055.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1109
	os_tid = 0x1d90

	[0055.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF", dwFileAttributes=0x80) returned 0
	[0055.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1110
	os_tid = 0x1d94

	[0055.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF", dwFileAttributes=0x80) returned 0
	[0055.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1111
	os_tid = 0x1d98

	[0055.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF", dwFileAttributes=0x80) returned 0
	[0055.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1112
	os_tid = 0x1d9c

	[0055.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF", dwFileAttributes=0x80) returned 0
	[0055.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1113
	os_tid = 0x1da0

	[0055.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF", dwFileAttributes=0x80) returned 0
	[0055.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1114
	os_tid = 0x1da4

	[0055.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF", dwFileAttributes=0x80) returned 0
	[0055.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1115
	os_tid = 0x1da8

	[0055.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF", dwFileAttributes=0x80) returned 0
	[0055.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1116
	os_tid = 0x1dac

	[0055.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF", dwFileAttributes=0x80) returned 0
	[0055.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1117
	os_tid = 0x1db0

	[0055.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF", dwFileAttributes=0x80) returned 0
	[0055.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1118
	os_tid = 0x1db4

	[0055.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF", dwFileAttributes=0x80) returned 0
	[0055.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1119
	os_tid = 0x1db8

	[0055.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF", dwFileAttributes=0x80) returned 0
	[0055.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1120
	os_tid = 0x1dbc

	[0055.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF", dwFileAttributes=0x80) returned 0
	[0055.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1121
	os_tid = 0x1dc0

	[0055.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF", dwFileAttributes=0x80) returned 0
	[0055.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1122
	os_tid = 0x1dc4

	[0055.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF", dwFileAttributes=0x80) returned 0
	[0055.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1123
	os_tid = 0x1dc8

	[0055.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF", dwFileAttributes=0x80) returned 0
	[0055.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1124
	os_tid = 0x1dcc

	[0055.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF", dwFileAttributes=0x80) returned 0
	[0055.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.193] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1125
	os_tid = 0x1dd0

	[0055.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF", dwFileAttributes=0x80) returned 0
	[0055.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1126
	os_tid = 0x1dd4

	[0055.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF", dwFileAttributes=0x80) returned 0
	[0055.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1127
	os_tid = 0x1dd8

	[0055.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF", dwFileAttributes=0x80) returned 0
	[0055.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.253] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1128
	os_tid = 0x1ddc

	[0055.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF", dwFileAttributes=0x80) returned 0
	[0055.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.254] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1129
	os_tid = 0x1de0

	[0055.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF", dwFileAttributes=0x80) returned 0
	[0055.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.255] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1130
	os_tid = 0x1de4

	[0055.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF", dwFileAttributes=0x80) returned 0
	[0055.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.258] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1131
	os_tid = 0x1de8

	[0055.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF", dwFileAttributes=0x80) returned 0
	[0055.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1132
	os_tid = 0x1dec

	[0055.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF", dwFileAttributes=0x80) returned 0
	[0055.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.262] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1133
	os_tid = 0x1df0

	[0055.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF", dwFileAttributes=0x80) returned 0
	[0055.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.263] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1134
	os_tid = 0x1df4

	[0055.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF", dwFileAttributes=0x80) returned 0
	[0055.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.264] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1135
	os_tid = 0x1df8

	[0055.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF", dwFileAttributes=0x80) returned 0
	[0055.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.266] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1136
	os_tid = 0x1dfc

	[0055.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF", dwFileAttributes=0x80) returned 0
	[0055.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.267] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1137
	os_tid = 0x1e00

	[0055.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF", dwFileAttributes=0x80) returned 0
	[0055.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.268] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1138
	os_tid = 0x1e04

	[0055.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF", dwFileAttributes=0x80) returned 0
	[0055.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.269] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1139
	os_tid = 0x1e08

	[0055.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF", dwFileAttributes=0x80) returned 0
	[0055.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.270] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1140
	os_tid = 0x1e0c

	[0055.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF", dwFileAttributes=0x80) returned 0
	[0055.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.272] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1141
	os_tid = 0x1e10

	[0055.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF", dwFileAttributes=0x80) returned 0
	[0055.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.273] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1142
	os_tid = 0x1e14

	[0055.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF", dwFileAttributes=0x80) returned 0
	[0055.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1143
	os_tid = 0x1e18

	[0055.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF", dwFileAttributes=0x80) returned 0
	[0055.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1144
	os_tid = 0x1e1c

	[0055.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF", dwFileAttributes=0x80) returned 0
	[0055.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.277] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1145
	os_tid = 0x1e20

	[0055.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF", dwFileAttributes=0x80) returned 0
	[0055.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.279] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1146
	os_tid = 0x1e24

	[0055.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF", dwFileAttributes=0x80) returned 0
	[0055.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1147
	os_tid = 0x1e28

	[0055.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF", dwFileAttributes=0x80) returned 0
	[0055.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1148
	os_tid = 0x1e2c

	[0055.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF", dwFileAttributes=0x80) returned 0
	[0055.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1149
	os_tid = 0x1e30

	[0055.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF", dwFileAttributes=0x80) returned 0
	[0055.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1150
	os_tid = 0x1e34

	[0055.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF", dwFileAttributes=0x80) returned 0
	[0055.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1151
	os_tid = 0x1e38

	[0055.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF", dwFileAttributes=0x80) returned 0
	[0055.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1152
	os_tid = 0x1e3c

	[0055.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF", dwFileAttributes=0x80) returned 0
	[0055.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1153
	os_tid = 0x1e40

	[0055.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF", dwFileAttributes=0x80) returned 0
	[0055.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1154
	os_tid = 0x1e44

	[0055.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF", dwFileAttributes=0x80) returned 0
	[0055.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1155
	os_tid = 0x1e48

	[0055.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF", dwFileAttributes=0x80) returned 0
	[0055.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1156
	os_tid = 0x1e4c

	[0055.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF", dwFileAttributes=0x80) returned 0
	[0055.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1157
	os_tid = 0x1e50

	[0055.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF", dwFileAttributes=0x80) returned 0
	[0055.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1158
	os_tid = 0x1e54

	[0055.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF", dwFileAttributes=0x80) returned 0
	[0055.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1159
	os_tid = 0x1e58

	[0055.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF", dwFileAttributes=0x80) returned 0
	[0055.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.296] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1160
	os_tid = 0x1e5c

	[0055.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF", dwFileAttributes=0x80) returned 0
	[0055.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1161
	os_tid = 0x1e60

	[0055.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF", dwFileAttributes=0x80) returned 0
	[0055.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.303] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1162
	os_tid = 0x1e64

	[0055.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF", dwFileAttributes=0x80) returned 0
	[0055.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.304] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1163
	os_tid = 0x1e68

	[0055.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF", dwFileAttributes=0x80) returned 0
	[0055.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1164
	os_tid = 0x1e6c

	[0055.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF", dwFileAttributes=0x80) returned 0
	[0055.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.306] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1165
	os_tid = 0x1e70

	[0055.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF", dwFileAttributes=0x80) returned 0
	[0055.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1166
	os_tid = 0x1e74

	[0055.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF", dwFileAttributes=0x80) returned 0
	[0055.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.308] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1167
	os_tid = 0x1e78

	[0055.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF", dwFileAttributes=0x80) returned 0
	[0055.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.310] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1168
	os_tid = 0x1e7c

	[0055.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF", dwFileAttributes=0x80) returned 0
	[0055.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.311] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1169
	os_tid = 0x1e80

	[0055.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF", dwFileAttributes=0x80) returned 0
	[0055.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.312] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1170
	os_tid = 0x1e84

	[0055.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF", dwFileAttributes=0x80) returned 0
	[0055.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.313] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1171
	os_tid = 0x1e88

	[0055.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF", dwFileAttributes=0x80) returned 0
	[0055.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.314] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1172
	os_tid = 0x1e8c

	[0055.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF", dwFileAttributes=0x80) returned 0
	[0055.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.315] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1173
	os_tid = 0x1e90

	[0055.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF", dwFileAttributes=0x80) returned 0
	[0055.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1174
	os_tid = 0x1e94

	[0055.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF", dwFileAttributes=0x80) returned 0
	[0055.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1175
	os_tid = 0x1e98

	[0055.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF", dwFileAttributes=0x80) returned 0
	[0055.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1176
	os_tid = 0x1e9c

	[0055.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF", dwFileAttributes=0x80) returned 0
	[0055.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1177
	os_tid = 0x1ea0

	[0055.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF", dwFileAttributes=0x80) returned 0
	[0055.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1178
	os_tid = 0x1ea4

	[0055.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF", dwFileAttributes=0x80) returned 0
	[0055.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1179
	os_tid = 0x1ea8

	[0055.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF", dwFileAttributes=0x80) returned 0
	[0055.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1180
	os_tid = 0x1eac

	[0055.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF", dwFileAttributes=0x80) returned 0
	[0055.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1181
	os_tid = 0x1eb0

	[0055.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF", dwFileAttributes=0x80) returned 0
	[0055.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1182
	os_tid = 0x1eb4

	[0055.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF", dwFileAttributes=0x80) returned 0
	[0055.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1183
	os_tid = 0x1eb8

	[0055.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF", dwFileAttributes=0x80) returned 0
	[0055.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1184
	os_tid = 0x1ebc

	[0055.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF", dwFileAttributes=0x80) returned 0
	[0055.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1185
	os_tid = 0x1ec0

	[0055.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF", dwFileAttributes=0x80) returned 0
	[0055.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1186
	os_tid = 0x1ec4

	[0055.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF", dwFileAttributes=0x80) returned 0
	[0055.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1187
	os_tid = 0x1ec8

	[0055.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF", dwFileAttributes=0x80) returned 0
	[0055.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.332] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1188
	os_tid = 0x1ecc

	[0055.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF", dwFileAttributes=0x80) returned 0
	[0055.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1189
	os_tid = 0x1ed0

	[0055.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF", dwFileAttributes=0x80) returned 0
	[0055.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1190
	os_tid = 0x1ed4

	[0055.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF", dwFileAttributes=0x80) returned 0
	[0055.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.336] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1191
	os_tid = 0x1ed8

	[0055.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF", dwFileAttributes=0x80) returned 0
	[0055.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1192
	os_tid = 0x1edc

	[0055.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF", dwFileAttributes=0x80) returned 0
	[0055.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1193
	os_tid = 0x1ee0

	[0055.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF", dwFileAttributes=0x80) returned 0
	[0055.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1194
	os_tid = 0x1ee4

	[0055.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF", dwFileAttributes=0x80) returned 0
	[0055.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1195
	os_tid = 0x1ee8

	[0055.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF", dwFileAttributes=0x80) returned 0
	[0055.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1196
	os_tid = 0x1eec

	[0055.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF", dwFileAttributes=0x80) returned 0
	[0055.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1197
	os_tid = 0x1ef0

	[0055.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF", dwFileAttributes=0x80) returned 0
	[0055.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1198
	os_tid = 0x1ef4

	[0055.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF", dwFileAttributes=0x80) returned 0
	[0055.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1199
	os_tid = 0x1ef8

	[0055.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF", dwFileAttributes=0x80) returned 0
	[0055.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1200
	os_tid = 0x1efc

	[0055.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF", dwFileAttributes=0x80) returned 0
	[0055.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1201
	os_tid = 0x1f00

	[0055.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF", dwFileAttributes=0x80) returned 0
	[0055.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.349] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1202
	os_tid = 0x1f04

	[0055.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF", dwFileAttributes=0x80) returned 0
	[0055.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.351] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1203
	os_tid = 0x1f08

	[0055.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF", dwFileAttributes=0x80) returned 0
	[0055.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1204
	os_tid = 0x1f0c

	[0055.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF", dwFileAttributes=0x80) returned 0
	[0055.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1205
	os_tid = 0x1f10

	[0055.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG", dwFileAttributes=0x80) returned 0
	[0055.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1206
	os_tid = 0x1f14

	[0055.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG", dwFileAttributes=0x80) returned 0
	[0055.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.356] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1207
	os_tid = 0x1f18

	[0055.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG", dwFileAttributes=0x80) returned 0
	[0055.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1208
	os_tid = 0x1f1c

	[0055.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG", dwFileAttributes=0x80) returned 0
	[0055.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.358] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1209
	os_tid = 0x1f20

	[0055.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG", dwFileAttributes=0x80) returned 0
	[0055.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1210
	os_tid = 0x1f24

	[0055.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG", dwFileAttributes=0x80) returned 0
	[0055.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.360] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1211
	os_tid = 0x1f28

	[0055.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG", dwFileAttributes=0x80) returned 0
	[0055.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1212
	os_tid = 0x1f2c

	[0055.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG", dwFileAttributes=0x80) returned 0
	[0055.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.363] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1213
	os_tid = 0x1f30

	[0055.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG", dwFileAttributes=0x80) returned 0
	[0055.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1214
	os_tid = 0x1f34

	[0055.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG", dwFileAttributes=0x80) returned 0
	[0055.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1215
	os_tid = 0x1f38

	[0055.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG", dwFileAttributes=0x80) returned 0
	[0055.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1216
	os_tid = 0x1f3c

	[0055.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG", dwFileAttributes=0x80) returned 0
	[0055.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.368] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1217
	os_tid = 0x1f40

	[0055.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG", dwFileAttributes=0x80) returned 0
	[0055.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.369] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1218
	os_tid = 0x1f44

	[0055.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG", dwFileAttributes=0x80) returned 0
	[0055.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1219
	os_tid = 0x1f48

	[0055.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG", dwFileAttributes=0x80) returned 0
	[0055.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1220
	os_tid = 0x1f4c

	[0055.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG", dwFileAttributes=0x80) returned 0
	[0055.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.372] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1221
	os_tid = 0x1f50

	[0055.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG", dwFileAttributes=0x80) returned 0
	[0055.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1222
	os_tid = 0x1f54

	[0055.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG", dwFileAttributes=0x80) returned 0
	[0055.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1223
	os_tid = 0x1f58

	[0055.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF", dwFileAttributes=0x80) returned 0
	[0055.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.376] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1224
	os_tid = 0x1f5c

	[0055.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF", dwFileAttributes=0x80) returned 0
	[0055.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.376] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1225
	os_tid = 0x1f60

	[0055.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF", dwFileAttributes=0x80) returned 0
	[0055.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1226
	os_tid = 0x1f64

	[0055.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF", dwFileAttributes=0x80) returned 0
	[0055.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.379] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1227
	os_tid = 0x1f68

	[0055.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF", dwFileAttributes=0x80) returned 0
	[0055.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.380] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1228
	os_tid = 0x1f6c

	[0055.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF", dwFileAttributes=0x80) returned 0
	[0055.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.381] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1229
	os_tid = 0x1f70

	[0055.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF", dwFileAttributes=0x80) returned 0
	[0055.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1230
	os_tid = 0x1f74

	[0055.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF", dwFileAttributes=0x80) returned 0
	[0055.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.383] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1231
	os_tid = 0x1f78

	[0055.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF", dwFileAttributes=0x80) returned 0
	[0055.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.384] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1232
	os_tid = 0x1f7c

	[0055.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF", dwFileAttributes=0x80) returned 0
	[0055.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.384] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1233
	os_tid = 0x1f80

	[0055.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF", dwFileAttributes=0x80) returned 0
	[0055.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1234
	os_tid = 0x1f84

	[0055.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF", dwFileAttributes=0x80) returned 0
	[0055.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.387] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1235
	os_tid = 0x1f88

	[0055.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF", dwFileAttributes=0x80) returned 0
	[0055.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.388] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1236
	os_tid = 0x1f8c

	[0055.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF", dwFileAttributes=0x80) returned 0
	[0055.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1237
	os_tid = 0x1f90

	[0055.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF", dwFileAttributes=0x80) returned 0
	[0055.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1238
	os_tid = 0x1f94

	[0055.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF", dwFileAttributes=0x80) returned 0
	[0055.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1239
	os_tid = 0x1f98

	[0055.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF", dwFileAttributes=0x80) returned 0
	[0055.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1240
	os_tid = 0x1f9c

	[0055.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF", dwFileAttributes=0x80) returned 0
	[0055.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.394] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1241
	os_tid = 0x1fa0

	[0055.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF", dwFileAttributes=0x80) returned 0
	[0055.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1242
	os_tid = 0x1fa4

	[0055.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF", dwFileAttributes=0x80) returned 0
	[0055.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.396] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1243
	os_tid = 0x1fa8

	[0055.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF", dwFileAttributes=0x80) returned 0
	[0055.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.397] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1244
	os_tid = 0x1fac

	[0055.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF", dwFileAttributes=0x80) returned 0
	[0055.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1245
	os_tid = 0x1fb0

	[0055.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF", dwFileAttributes=0x80) returned 0
	[0055.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1246
	os_tid = 0x1fb4

	[0055.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF", dwFileAttributes=0x80) returned 0
	[0055.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.404] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1247
	os_tid = 0x1fb8

	[0055.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF", dwFileAttributes=0x80) returned 0
	[0055.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1248
	os_tid = 0x1fbc

	[0055.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF", dwFileAttributes=0x80) returned 0
	[0055.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1249
	os_tid = 0x1fc0

	[0055.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF", dwFileAttributes=0x80) returned 0
	[0055.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1250
	os_tid = 0x1fc4

	[0055.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF", dwFileAttributes=0x80) returned 0
	[0055.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1251
	os_tid = 0x1fc8

	[0055.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF", dwFileAttributes=0x80) returned 0
	[0055.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1252
	os_tid = 0x1fcc

	[0055.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF", dwFileAttributes=0x80) returned 0
	[0055.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.415] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1253
	os_tid = 0x1fd0

	[0055.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF", dwFileAttributes=0x80) returned 0
	[0055.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1254
	os_tid = 0x1fd4

	[0055.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF", dwFileAttributes=0x80) returned 0
	[0055.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1255
	os_tid = 0x1fd8

	[0055.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF", dwFileAttributes=0x80) returned 0
	[0055.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1256
	os_tid = 0x1fdc

	[0055.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF", dwFileAttributes=0x80) returned 0
	[0055.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1257
	os_tid = 0x1fe0

	[0055.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF", dwFileAttributes=0x80) returned 0
	[0055.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1258
	os_tid = 0x1fe4

	[0055.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF", dwFileAttributes=0x80) returned 0
	[0055.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1259
	os_tid = 0x1fe8

	[0055.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF", dwFileAttributes=0x80) returned 0
	[0055.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1260
	os_tid = 0x1fec

	[0055.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF", dwFileAttributes=0x80) returned 0
	[0055.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.432] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1261
	os_tid = 0x1ff0

	[0055.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF", dwFileAttributes=0x80) returned 0
	[0055.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1262
	os_tid = 0x1ff4

	[0055.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF", dwFileAttributes=0x80) returned 0
	[0055.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.484] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1263
	os_tid = 0x1ff8

	[0055.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF", dwFileAttributes=0x80) returned 0
	[0055.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1264
	os_tid = 0x1ffc

	[0055.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF", dwFileAttributes=0x80) returned 0
	[0055.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1265
	os_tid = 0x2004

	[0055.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF", dwFileAttributes=0x80) returned 0
	[0055.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1266
	os_tid = 0x2008

	[0055.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF", dwFileAttributes=0x80) returned 0
	[0055.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1267
	os_tid = 0x200c

	[0055.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF", dwFileAttributes=0x80) returned 0
	[0055.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1268
	os_tid = 0x2010

	[0055.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF", dwFileAttributes=0x80) returned 0
	[0055.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1269
	os_tid = 0x2014

	[0055.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF", dwFileAttributes=0x80) returned 0
	[0055.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.499] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1270
	os_tid = 0x2018

	[0055.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF", dwFileAttributes=0x80) returned 0
	[0055.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1271
	os_tid = 0x201c

	[0055.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF", dwFileAttributes=0x80) returned 0
	[0055.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1272
	os_tid = 0x2020

	[0055.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF", dwFileAttributes=0x80) returned 0
	[0055.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1273
	os_tid = 0x2024

	[0055.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF", dwFileAttributes=0x80) returned 0
	[0055.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.504] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1274
	os_tid = 0x2028

	[0055.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF", dwFileAttributes=0x80) returned 0
	[0055.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.505] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1275
	os_tid = 0x202c

	[0055.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF", dwFileAttributes=0x80) returned 0
	[0055.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1276
	os_tid = 0x2030

	[0055.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF", dwFileAttributes=0x80) returned 0
	[0055.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1277
	os_tid = 0x2034

	[0055.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF", dwFileAttributes=0x80) returned 0
	[0055.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.515] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1278
	os_tid = 0x2038

	[0055.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF", dwFileAttributes=0x80) returned 0
	[0055.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.517] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1279
	os_tid = 0x203c

	[0055.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF", dwFileAttributes=0x80) returned 0
	[0055.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.518] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1280
	os_tid = 0x2040

	[0055.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF", dwFileAttributes=0x80) returned 0
	[0055.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1281
	os_tid = 0x2044

	[0055.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF", dwFileAttributes=0x80) returned 0
	[0055.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.523] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1282
	os_tid = 0x2048

	[0055.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF", dwFileAttributes=0x80) returned 0
	[0055.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.524] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1283
	os_tid = 0x204c

	[0055.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF", dwFileAttributes=0x80) returned 0
	[0055.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1284
	os_tid = 0x2050

	[0055.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF", dwFileAttributes=0x80) returned 0
	[0055.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.553] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1285
	os_tid = 0x2054

	[0055.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF", dwFileAttributes=0x80) returned 0
	[0055.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1286
	os_tid = 0x2058

	[0055.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF", dwFileAttributes=0x80) returned 0
	[0055.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1287
	os_tid = 0x205c

	[0055.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF", dwFileAttributes=0x80) returned 0
	[0055.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.558] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1288
	os_tid = 0x2060

	[0055.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF", dwFileAttributes=0x80) returned 0
	[0055.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.559] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1289
	os_tid = 0x2064

	[0055.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF", dwFileAttributes=0x80) returned 0
	[0055.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1290
	os_tid = 0x2068

	[0055.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF", dwFileAttributes=0x80) returned 0
	[0055.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1291
	os_tid = 0x206c

	[0055.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF", dwFileAttributes=0x80) returned 0
	[0055.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1292
	os_tid = 0x2070

	[0055.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF", dwFileAttributes=0x80) returned 0
	[0055.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1293
	os_tid = 0x2074

	[0055.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF", dwFileAttributes=0x80) returned 0
	[0055.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1294
	os_tid = 0x2078

	[0055.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF", dwFileAttributes=0x80) returned 0
	[0055.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1295
	os_tid = 0x207c

	[0055.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF", dwFileAttributes=0x80) returned 0
	[0055.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.571] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1296
	os_tid = 0x2080

	[0055.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF", dwFileAttributes=0x80) returned 0
	[0055.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1297
	os_tid = 0x2084

	[0055.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG", dwFileAttributes=0x80) returned 0
	[0055.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.574] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1298
	os_tid = 0x2088

	[0055.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF", dwFileAttributes=0x80) returned 0
	[0055.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1299
	os_tid = 0x208c

	[0055.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF", dwFileAttributes=0x80) returned 0
	[0055.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.577] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1300
	os_tid = 0x2090

	[0055.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF", dwFileAttributes=0x80) returned 0
	[0055.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1301
	os_tid = 0x2094

	[0055.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF", dwFileAttributes=0x80) returned 0
	[0055.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1302
	os_tid = 0x2098

	[0055.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF", dwFileAttributes=0x80) returned 0
	[0055.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1303
	os_tid = 0x209c

	[0055.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF", dwFileAttributes=0x80) returned 0
	[0055.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1304
	os_tid = 0x20a0

	[0055.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF", dwFileAttributes=0x80) returned 0
	[0055.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1305
	os_tid = 0x20a4

	[0055.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF", dwFileAttributes=0x80) returned 0
	[0055.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1306
	os_tid = 0x20a8

	[0055.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF", dwFileAttributes=0x80) returned 0
	[0055.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1307
	os_tid = 0x20ac

	[0055.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG", dwFileAttributes=0x80) returned 0
	[0055.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.587] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1308
	os_tid = 0x20b0

	[0055.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG", dwFileAttributes=0x80) returned 0
	[0055.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.589] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1309
	os_tid = 0x20b4

	[0055.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG", dwFileAttributes=0x80) returned 0
	[0055.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1310
	os_tid = 0x20b8

	[0055.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG", dwFileAttributes=0x80) returned 0
	[0055.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.591] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1311
	os_tid = 0x20bc

	[0055.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG", dwFileAttributes=0x80) returned 0
	[0055.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.592] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1312
	os_tid = 0x20c0

	[0055.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG", dwFileAttributes=0x80) returned 0
	[0055.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.593] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1313
	os_tid = 0x20c4

	[0055.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG", dwFileAttributes=0x80) returned 0
	[0055.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.595] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1314
	os_tid = 0x20c8

	[0055.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG", dwFileAttributes=0x80) returned 0
	[0055.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.595] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1315
	os_tid = 0x20cc

	[0055.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG", dwFileAttributes=0x80) returned 0
	[0055.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.597] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1316
	os_tid = 0x20d0

	[0055.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG", dwFileAttributes=0x80) returned 0
	[0055.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.598] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1317
	os_tid = 0x20d4

	[0055.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG", dwFileAttributes=0x80) returned 0
	[0055.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1318
	os_tid = 0x20d8

	[0055.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG", dwFileAttributes=0x80) returned 0
	[0055.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.600] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1319
	os_tid = 0x20dc

	[0055.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG", dwFileAttributes=0x80) returned 0
	[0055.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.602] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1320
	os_tid = 0x20e0

	[0055.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG", dwFileAttributes=0x80) returned 0
	[0055.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.603] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1321
	os_tid = 0x20e4

	[0055.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF", dwFileAttributes=0x80) returned 0
	[0055.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.604] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1322
	os_tid = 0x20e8

	[0055.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF", dwFileAttributes=0x80) returned 0
	[0055.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.606] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1323
	os_tid = 0x20ec

	[0055.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF", dwFileAttributes=0x80) returned 0
	[0055.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1324
	os_tid = 0x20f0

	[0055.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF", dwFileAttributes=0x80) returned 0
	[0055.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.608] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1325
	os_tid = 0x20f4

	[0055.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF", dwFileAttributes=0x80) returned 0
	[0055.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.609] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1326
	os_tid = 0x20f8

	[0055.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF", dwFileAttributes=0x80) returned 0
	[0055.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.612] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1327
	os_tid = 0x20fc

	[0055.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF", dwFileAttributes=0x80) returned 0
	[0055.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.612] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1328
	os_tid = 0x2100

	[0055.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF", dwFileAttributes=0x80) returned 0
	[0055.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.614] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1329
	os_tid = 0x2104

	[0055.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF", dwFileAttributes=0x80) returned 0
	[0055.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.616] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1330
	os_tid = 0x2108

	[0055.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF", dwFileAttributes=0x80) returned 0
	[0055.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.616] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1331
	os_tid = 0x210c

	[0055.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF", dwFileAttributes=0x80) returned 0
	[0055.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.617] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1332
	os_tid = 0x2110

	[0055.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF", dwFileAttributes=0x80) returned 0
	[0055.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.618] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1333
	os_tid = 0x2114

	[0055.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF", dwFileAttributes=0x80) returned 0
	[0055.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.620] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1334
	os_tid = 0x2118

	[0055.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF", dwFileAttributes=0x80) returned 0
	[0055.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.621] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1335
	os_tid = 0x211c

	[0055.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF", dwFileAttributes=0x80) returned 0
	[0055.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.622] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1336
	os_tid = 0x2120

	[0055.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF", dwFileAttributes=0x80) returned 0
	[0055.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.624] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1337
	os_tid = 0x2124

	[0055.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF", dwFileAttributes=0x80) returned 0
	[0055.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.625] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1338
	os_tid = 0x2128

	[0055.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF", dwFileAttributes=0x80) returned 0
	[0055.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.626] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1339
	os_tid = 0x212c

	[0055.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF", dwFileAttributes=0x80) returned 0
	[0055.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.627] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1340
	os_tid = 0x2130

	[0055.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF", dwFileAttributes=0x80) returned 0
	[0055.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.628] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1341
	os_tid = 0x2134

	[0055.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF", dwFileAttributes=0x80) returned 0
	[0055.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.630] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1342
	os_tid = 0x2138

	[0055.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF", dwFileAttributes=0x80) returned 0
	[0055.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1343
	os_tid = 0x213c

	[0055.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF", dwFileAttributes=0x80) returned 0
	[0055.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.633] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1344
	os_tid = 0x2140

	[0055.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF", dwFileAttributes=0x80) returned 0
	[0055.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.634] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1345
	os_tid = 0x2144

	[0055.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF", dwFileAttributes=0x80) returned 0
	[0055.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.635] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1346
	os_tid = 0x2148

	[0055.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF", dwFileAttributes=0x80) returned 0
	[0055.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1347
	os_tid = 0x214c

	[0055.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF", dwFileAttributes=0x80) returned 0
	[0055.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1348
	os_tid = 0x2150

	[0055.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF", dwFileAttributes=0x80) returned 0
	[0055.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.638] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1349
	os_tid = 0x2154

	[0055.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF", dwFileAttributes=0x80) returned 0
	[0055.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.640] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1350
	os_tid = 0x2158

	[0055.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF", dwFileAttributes=0x80) returned 0
	[0055.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1351
	os_tid = 0x215c

	[0055.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF", dwFileAttributes=0x80) returned 0
	[0055.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1352
	os_tid = 0x2160

	[0055.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF", dwFileAttributes=0x80) returned 0
	[0055.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1353
	os_tid = 0x2164

	[0055.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF", dwFileAttributes=0x80) returned 0
	[0055.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.643] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1354
	os_tid = 0x2168

	[0055.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF", dwFileAttributes=0x80) returned 0
	[0055.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.644] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1355
	os_tid = 0x216c

	[0055.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF", dwFileAttributes=0x80) returned 0
	[0055.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1356
	os_tid = 0x2170

	[0055.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF", dwFileAttributes=0x80) returned 0
	[0055.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1357
	os_tid = 0x2174

	[0055.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF", dwFileAttributes=0x80) returned 0
	[0055.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1358
	os_tid = 0x2178

	[0055.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF", dwFileAttributes=0x80) returned 0
	[0055.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.648] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1359
	os_tid = 0x217c

	[0055.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF", dwFileAttributes=0x80) returned 0
	[0055.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.649] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1360
	os_tid = 0x2180

	[0055.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF", dwFileAttributes=0x80) returned 0
	[0055.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1363
	os_tid = 0x2184

	[0055.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF", dwFileAttributes=0x80) returned 0
	[0055.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1364
	os_tid = 0x2188

	[0055.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF", dwFileAttributes=0x80) returned 0
	[0055.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1365
	os_tid = 0x218c

	[0055.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF", dwFileAttributes=0x80) returned 0
	[0055.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1366
	os_tid = 0x2190

	[0055.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF", dwFileAttributes=0x80) returned 0
	[0055.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1367
	os_tid = 0x2194

	[0055.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF", dwFileAttributes=0x80) returned 0
	[0055.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.787] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1368
	os_tid = 0x2198

	[0055.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF", dwFileAttributes=0x80) returned 0
	[0055.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.788] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1369
	os_tid = 0x219c

	[0055.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF", dwFileAttributes=0x80) returned 0
	[0055.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.789] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1370
	os_tid = 0x21a0

	[0055.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF", dwFileAttributes=0x80) returned 0
	[0055.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1371
	os_tid = 0x21a4

	[0055.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF", dwFileAttributes=0x80) returned 0
	[0055.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.792] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1372
	os_tid = 0x21a8

	[0055.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF", dwFileAttributes=0x80) returned 0
	[0055.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.793] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1373
	os_tid = 0x21ac

	[0055.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF", dwFileAttributes=0x80) returned 0
	[0055.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.794] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1374
	os_tid = 0x21b0

	[0055.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF", dwFileAttributes=0x80) returned 0
	[0055.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1375
	os_tid = 0x21b4

	[0055.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF", dwFileAttributes=0x80) returned 0
	[0055.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1376
	os_tid = 0x21b8

	[0055.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF", dwFileAttributes=0x80) returned 0
	[0055.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188679.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188679.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1377
	os_tid = 0x21bc

	[0055.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF", dwFileAttributes=0x80) returned 0
	[0055.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.799] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1378
	os_tid = 0x21c0

	[0055.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF", dwFileAttributes=0x80) returned 0
	[0055.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1379
	os_tid = 0x21c4

	[0055.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF", dwFileAttributes=0x80) returned 0
	[0055.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195260.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195260.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.802] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1380
	os_tid = 0x21c8

	[0055.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF", dwFileAttributes=0x80) returned 0
	[0055.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.802] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1381
	os_tid = 0x21cc

	[0055.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF", dwFileAttributes=0x80) returned 0
	[0055.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.804] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1382
	os_tid = 0x21d0

	[0055.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF", dwFileAttributes=0x80) returned 0
	[0055.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1383
	os_tid = 0x21d4

	[0055.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF", dwFileAttributes=0x80) returned 0
	[0055.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195772.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195772.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.806] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1384
	os_tid = 0x21d8

	[0055.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF", dwFileAttributes=0x80) returned 0
	[0055.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0195788.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0195788.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.807] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1385
	os_tid = 0x21dc

	[0055.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF", dwFileAttributes=0x80) returned 0
	[0055.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196060.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196060.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.808] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1386
	os_tid = 0x21e0

	[0055.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF", dwFileAttributes=0x80) returned 0
	[0055.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196110.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196110.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1387
	os_tid = 0x21e4

	[0055.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF", dwFileAttributes=0x80) returned 0
	[0055.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196142.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196142.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1388
	os_tid = 0x21e8

	[0055.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF", dwFileAttributes=0x80) returned 0
	[0055.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196354.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196354.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.812] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1389
	os_tid = 0x21ec

	[0055.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF", dwFileAttributes=0x80) returned 0
	[0055.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1390
	os_tid = 0x21f0

	[0055.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF", dwFileAttributes=0x80) returned 0
	[0055.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0196364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0196364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.814] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1391
	os_tid = 0x21f4

	[0055.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF", dwFileAttributes=0x80) returned 0
	[0055.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197979.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197979.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1392
	os_tid = 0x21f8

	[0055.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF", dwFileAttributes=0x80) returned 0
	[0055.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0197983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0197983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1393
	os_tid = 0x21fc

	[0055.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF", dwFileAttributes=0x80) returned 0
	[0055.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198016.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198016.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.820] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1394
	os_tid = 0x2200

	[0055.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF", dwFileAttributes=0x80) returned 0
	[0055.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1395
	os_tid = 0x2204

	[0055.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF", dwFileAttributes=0x80) returned 0
	[0055.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198021.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198021.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1396
	os_tid = 0x2208

	[0055.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF", dwFileAttributes=0x80) returned 0
	[0055.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198022.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198022.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1397
	os_tid = 0x220c

	[0055.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF", dwFileAttributes=0x80) returned 0
	[0055.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198025.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198025.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1398
	os_tid = 0x2210

	[0055.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF", dwFileAttributes=0x80) returned 0
	[0055.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198102.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198102.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1399
	os_tid = 0x2214

	[0055.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF", dwFileAttributes=0x80) returned 0
	[0055.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198113.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198113.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1400
	os_tid = 0x2218

	[0055.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF", dwFileAttributes=0x80) returned 0
	[0055.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198226.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198226.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.931] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1401
	os_tid = 0x221c

	[0055.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF", dwFileAttributes=0x80) returned 0
	[0055.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.933] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1402
	os_tid = 0x2220

	[0055.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF", dwFileAttributes=0x80) returned 0
	[0055.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198372.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198372.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.934] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1403
	os_tid = 0x2224

	[0055.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF", dwFileAttributes=0x80) returned 0
	[0055.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.935] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1404
	os_tid = 0x2228

	[0055.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF", dwFileAttributes=0x80) returned 0
	[0055.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198447.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198447.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1405
	os_tid = 0x222c

	[0055.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF", dwFileAttributes=0x80) returned 0
	[0055.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1406
	os_tid = 0x2230

	[0055.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF", dwFileAttributes=0x80) returned 0
	[0055.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0198712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0198712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.938] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1407
	os_tid = 0x2234

	[0055.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF", dwFileAttributes=0x80) returned 0
	[0055.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1408
	os_tid = 0x2238

	[0055.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF", dwFileAttributes=0x80) returned 0
	[0055.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199303.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199303.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.941] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1409
	os_tid = 0x223c

	[0055.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF", dwFileAttributes=0x80) returned 0
	[0055.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1410
	os_tid = 0x2240

	[0055.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF", dwFileAttributes=0x80) returned 0
	[0055.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199423.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199423.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.943] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1411
	os_tid = 0x2244

	[0055.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF", dwFileAttributes=0x80) returned 0
	[0055.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199429.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199429.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1412
	os_tid = 0x2248

	[0055.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF", dwFileAttributes=0x80) returned 0
	[0055.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199465.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199465.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.945] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1413
	os_tid = 0x224c

	[0055.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF", dwFileAttributes=0x80) returned 0
	[0055.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199469.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199469.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.947] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1414
	os_tid = 0x2250

	[0055.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF", dwFileAttributes=0x80) returned 0
	[0055.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199473.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199473.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.948] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1415
	os_tid = 0x2254

	[0055.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF", dwFileAttributes=0x80) returned 0
	[0055.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199475.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199475.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.949] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1416
	os_tid = 0x2258

	[0055.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF", dwFileAttributes=0x80) returned 0
	[0055.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199483.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199483.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.950] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1417
	os_tid = 0x225c

	[0055.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF", dwFileAttributes=0x80) returned 0
	[0055.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0199609.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0199609.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1418
	os_tid = 0x2260

	[0055.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF", dwFileAttributes=0x80) returned 0
	[0055.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1419
	os_tid = 0x2264

	[0055.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF", dwFileAttributes=0x80) returned 0
	[0055.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1420
	os_tid = 0x2268

	[0055.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF", dwFileAttributes=0x80) returned 0
	[0055.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1421
	os_tid = 0x226c

	[0055.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF", dwFileAttributes=0x80) returned 0
	[0055.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1422
	os_tid = 0x2270

	[0055.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF", dwFileAttributes=0x80) returned 0
	[0055.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1423
	os_tid = 0x2274

	[0055.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF", dwFileAttributes=0x80) returned 0
	[0055.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1424
	os_tid = 0x2278

	[0055.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF", dwFileAttributes=0x80) returned 0
	[0055.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200289.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200289.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.959] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1425
	os_tid = 0x227c

	[0055.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF", dwFileAttributes=0x80) returned 0
	[0055.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200377.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200377.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.960] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1426
	os_tid = 0x2280

	[0055.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF", dwFileAttributes=0x80) returned 0
	[0055.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200383.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200383.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0055.961] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1427
	os_tid = 0x2284

	[0055.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF", dwFileAttributes=0x80) returned 0
	[0056.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200467.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200467.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.058] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1428
	os_tid = 0x2288

	[0056.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF", dwFileAttributes=0x80) returned 0
	[0056.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200521.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200521.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1429
	os_tid = 0x228c

	[0056.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF", dwFileAttributes=0x80) returned 0
	[0056.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0200611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0200611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1430
	os_tid = 0x2290

	[0056.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG", dwFileAttributes=0x80) returned 0
	[0056.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0202045.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0202045.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.064] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1431
	os_tid = 0x2294

	[0056.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF", dwFileAttributes=0x80) returned 0
	[0056.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0211981.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0211981.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.065] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1432
	os_tid = 0x2298

	[0056.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF", dwFileAttributes=0x80) returned 0
	[0056.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.066] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1433
	os_tid = 0x229c

	[0056.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF", dwFileAttributes=0x80) returned 0
	[0056.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212601.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212601.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.067] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1434
	os_tid = 0x22a0

	[0056.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF", dwFileAttributes=0x80) returned 0
	[0056.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.068] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1435
	os_tid = 0x22a4

	[0056.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF", dwFileAttributes=0x80) returned 0
	[0056.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212751.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212751.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.070] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1436
	os_tid = 0x22a8

	[0056.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF", dwFileAttributes=0x80) returned 0
	[0056.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0212953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0212953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.070] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1437
	os_tid = 0x22ac

	[0056.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF", dwFileAttributes=0x80) returned 0
	[0056.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.073] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1438
	os_tid = 0x22b0

	[0056.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF", dwFileAttributes=0x80) returned 0
	[0056.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0213449.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0213449.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.077] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1439
	os_tid = 0x22b4

	[0056.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF", dwFileAttributes=0x80) returned 0
	[0056.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214934.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214934.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.078] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1440
	os_tid = 0x22b8

	[0056.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF", dwFileAttributes=0x80) returned 0
	[0056.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0214948.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0214948.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.079] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1441
	os_tid = 0x22bc

	[0056.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF", dwFileAttributes=0x80) returned 0
	[0056.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215070.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215070.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.081] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1442
	os_tid = 0x22c0

	[0056.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF", dwFileAttributes=0x80) returned 0
	[0056.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215076.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215076.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.082] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1443
	os_tid = 0x22c4

	[0056.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF", dwFileAttributes=0x80) returned 0
	[0056.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215210.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215210.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.083] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1444
	os_tid = 0x22c8

	[0056.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF", dwFileAttributes=0x80) returned 0
	[0056.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215709.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215709.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.084] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1445
	os_tid = 0x22cc

	[0056.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF", dwFileAttributes=0x80) returned 0
	[0056.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.086] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1446
	os_tid = 0x22d0

	[0056.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF", dwFileAttributes=0x80) returned 0
	[0056.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0215718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0215718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.087] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1447
	os_tid = 0x22d4

	[0056.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG", dwFileAttributes=0x80) returned 0
	[0056.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216112.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216112.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.088] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1448
	os_tid = 0x22d8

	[0056.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG", dwFileAttributes=0x80) returned 0
	[0056.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.089] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1449
	os_tid = 0x22dc

	[0056.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF", dwFileAttributes=0x80) returned 0
	[0056.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216540.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216540.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.090] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1450
	os_tid = 0x22e0

	[0056.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF", dwFileAttributes=0x80) returned 0
	[0056.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.091] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1451
	os_tid = 0x22e4

	[0056.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF", dwFileAttributes=0x80) returned 0
	[0056.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.092] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1452
	os_tid = 0x22e8

	[0056.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF", dwFileAttributes=0x80) returned 0
	[0056.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216612.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216612.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.093] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1453
	os_tid = 0x22ec

	[0056.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF", dwFileAttributes=0x80) returned 0
	[0056.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0216874.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0216874.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.094] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1454
	os_tid = 0x22f0

	[0056.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF", dwFileAttributes=0x80) returned 0
	[0056.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.096] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1455
	os_tid = 0x22f4

	[0056.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF", dwFileAttributes=0x80) returned 0
	[0056.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.098] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1456
	os_tid = 0x22f8

	[0056.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF", dwFileAttributes=0x80) returned 0
	[0056.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0217872.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0217872.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1457
	os_tid = 0x22fc

	[0056.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG", dwFileAttributes=0x80) returned 0
	[0056.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227419.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227419.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.101] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1458
	os_tid = 0x2300

	[0056.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG", dwFileAttributes=0x80) returned 0
	[0056.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0227558.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0227558.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.102] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1459
	os_tid = 0x2304

	[0056.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF", dwFileAttributes=0x80) returned 0
	[0056.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228823.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228823.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.104] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1460
	os_tid = 0x2308

	[0056.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF", dwFileAttributes=0x80) returned 0
	[0056.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0228959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0228959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1461
	os_tid = 0x230c

	[0056.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF", dwFileAttributes=0x80) returned 0
	[0056.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230553.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230553.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1462
	os_tid = 0x2310

	[0056.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF", dwFileAttributes=0x80) returned 0
	[0056.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0230558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0230558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.107] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1463
	os_tid = 0x2314

	[0056.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF", dwFileAttributes=0x80) returned 0
	[0056.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.108] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1464
	os_tid = 0x2318

	[0056.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF", dwFileAttributes=0x80) returned 0
	[0056.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232393.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232393.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1465
	os_tid = 0x231c

	[0056.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF", dwFileAttributes=0x80) returned 0
	[0056.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232395.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232395.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.110] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1466
	os_tid = 0x2320

	[0056.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF", dwFileAttributes=0x80) returned 0
	[0056.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232795.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232795.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1467
	os_tid = 0x2324

	[0056.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF", dwFileAttributes=0x80) returned 0
	[0056.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232797.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232797.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.114] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1468
	os_tid = 0x2328

	[0056.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF", dwFileAttributes=0x80) returned 0
	[0056.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0232803.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0232803.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.115] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1469
	os_tid = 0x232c

	[0056.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF", dwFileAttributes=0x80) returned 0
	[0056.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1470
	os_tid = 0x2330

	[0056.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF", dwFileAttributes=0x80) returned 0
	[0056.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233665.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233665.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1471
	os_tid = 0x2334

	[0056.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF", dwFileAttributes=0x80) returned 0
	[0056.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0233992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0233992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1472
	os_tid = 0x2338

	[0056.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF", dwFileAttributes=0x80) returned 0
	[0056.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234000.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234000.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.118] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1473
	os_tid = 0x233c

	[0056.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF", dwFileAttributes=0x80) returned 0
	[0056.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234001.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234001.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.120] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1474
	os_tid = 0x2340

	[0056.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF", dwFileAttributes=0x80) returned 0
	[0056.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0234376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0234376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1475
	os_tid = 0x2344

	[0056.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF", dwFileAttributes=0x80) returned 0
	[0056.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237225.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237225.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.122] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1476
	os_tid = 0x2348

	[0056.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF", dwFileAttributes=0x80) returned 0
	[0056.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237228.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237228.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1477
	os_tid = 0x234c

	[0056.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF", dwFileAttributes=0x80) returned 0
	[0056.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.124] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1478
	os_tid = 0x2350

	[0056.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF", dwFileAttributes=0x80) returned 0
	[0056.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0237759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0237759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1479
	os_tid = 0x2354

	[0056.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF", dwFileAttributes=0x80) returned 0
	[0056.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238333.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238333.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.127] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1480
	os_tid = 0x2358

	[0056.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF", dwFileAttributes=0x80) returned 0
	[0056.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238927.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238927.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.128] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1481
	os_tid = 0x235c

	[0056.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF", dwFileAttributes=0x80) returned 0
	[0056.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238959.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238959.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.129] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1482
	os_tid = 0x2360

	[0056.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF", dwFileAttributes=0x80) returned 0
	[0056.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0238983.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0238983.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.131] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1483
	os_tid = 0x2364

	[0056.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF", dwFileAttributes=0x80) returned 0
	[0056.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239057.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239057.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.132] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1484
	os_tid = 0x2368

	[0056.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF", dwFileAttributes=0x80) returned 0
	[0056.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.133] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1485
	os_tid = 0x236c

	[0056.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF", dwFileAttributes=0x80) returned 0
	[0056.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239079.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239079.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.134] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1486
	os_tid = 0x2370

	[0056.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF", dwFileAttributes=0x80) returned 0
	[0056.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.135] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1487
	os_tid = 0x2374

	[0056.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF", dwFileAttributes=0x80) returned 0
	[0056.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239611.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239611.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.136] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1488
	os_tid = 0x2378

	[0056.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF", dwFileAttributes=0x80) returned 0
	[0056.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239935.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239935.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.137] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1489
	os_tid = 0x237c

	[0056.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF", dwFileAttributes=0x80) returned 0
	[0056.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239941.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239941.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.138] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1490
	os_tid = 0x2380

	[0056.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF", dwFileAttributes=0x80) returned 0
	[0056.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239943.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239943.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.139] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1491
	os_tid = 0x2384

	[0056.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF", dwFileAttributes=0x80) returned 0
	[0056.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239951.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239951.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.140] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1492
	os_tid = 0x2388

	[0056.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF", dwFileAttributes=0x80) returned 0
	[0056.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239953.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239953.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.141] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1493
	os_tid = 0x238c

	[0056.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF", dwFileAttributes=0x80) returned 0
	[0056.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239955.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239955.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.142] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1494
	os_tid = 0x2390

	[0056.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF", dwFileAttributes=0x80) returned 0
	[0056.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239965.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239965.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.143] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1495
	os_tid = 0x2394

	[0056.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF", dwFileAttributes=0x80) returned 0
	[0056.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239967.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239967.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.145] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1496
	os_tid = 0x2398

	[0056.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF", dwFileAttributes=0x80) returned 0
	[0056.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239973.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239973.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.145] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1497
	os_tid = 0x239c

	[0056.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF", dwFileAttributes=0x80) returned 0
	[0056.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239975.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239975.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.147] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1498
	os_tid = 0x23a0

	[0056.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF", dwFileAttributes=0x80) returned 0
	[0056.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0239997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0239997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.148] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1499
	os_tid = 0x23a4

	[0056.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF", dwFileAttributes=0x80) returned 0
	[0056.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240157.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240157.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1500
	os_tid = 0x23a8

	[0056.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF", dwFileAttributes=0x80) returned 0
	[0056.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.150] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1501
	os_tid = 0x23ac

	[0056.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF", dwFileAttributes=0x80) returned 0
	[0056.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240189.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240189.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1502
	os_tid = 0x23b0

	[0056.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF", dwFileAttributes=0x80) returned 0
	[0056.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0240291.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0240291.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.153] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1503
	os_tid = 0x23b4

	[0056.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF", dwFileAttributes=0x80) returned 0
	[0056.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1504
	os_tid = 0x23b8

	[0056.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF", dwFileAttributes=0x80) returned 0
	[0056.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241037.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241037.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1505
	os_tid = 0x23bc

	[0056.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF", dwFileAttributes=0x80) returned 0
	[0056.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1506
	os_tid = 0x23c0

	[0056.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF", dwFileAttributes=0x80) returned 0
	[0056.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241043.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241043.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.160] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1507
	os_tid = 0x23c4

	[0056.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF", dwFileAttributes=0x80) returned 0
	[0056.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241077.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241077.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1508
	os_tid = 0x23c8

	[0056.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF", dwFileAttributes=0x80) returned 0
	[0056.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241773.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241773.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.163] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1509
	os_tid = 0x23cc

	[0056.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF", dwFileAttributes=0x80) returned 0
	[0056.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0241781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0241781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1510
	os_tid = 0x23d0

	[0056.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF", dwFileAttributes=0x80) returned 0
	[0056.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1511
	os_tid = 0x23d4

	[0056.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF", dwFileAttributes=0x80) returned 0
	[0056.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0250997.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0250997.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1512
	os_tid = 0x23d8

	[0056.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF", dwFileAttributes=0x80) returned 0
	[0056.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0251007.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0251007.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1513
	os_tid = 0x23dc

	[0056.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF", dwFileAttributes=0x80) returned 0
	[0056.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252629.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252629.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1514
	os_tid = 0x23e0

	[0056.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF", dwFileAttributes=0x80) returned 0
	[0056.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0252669.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0252669.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1515
	os_tid = 0x23e4

	[0056.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF", dwFileAttributes=0x80) returned 0
	[0056.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0278702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0278702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1516
	os_tid = 0x23e8

	[0056.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF", dwFileAttributes=0x80) returned 0
	[0056.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0279644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0279644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1517
	os_tid = 0x23ec

	[0056.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF", dwFileAttributes=0x80) returned 0
	[0056.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0280468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0280468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1518
	os_tid = 0x23f0

	[0056.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF", dwFileAttributes=0x80) returned 0
	[0056.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281008.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281008.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1519
	os_tid = 0x23f4

	[0056.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF", dwFileAttributes=0x80) returned 0
	[0056.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281243.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281243.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1520
	os_tid = 0x23f8

	[0056.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF", dwFileAttributes=0x80) returned 0
	[0056.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281630.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281630.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1521
	os_tid = 0x23fc

	[0056.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF", dwFileAttributes=0x80) returned 0
	[0056.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281632.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281632.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1522
	os_tid = 0x2404

	[0056.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF", dwFileAttributes=0x80) returned 0
	[0056.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1523
	os_tid = 0x2408

	[0056.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF", dwFileAttributes=0x80) returned 0
	[0056.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0281640.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0281640.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1524
	os_tid = 0x240c

	[0056.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF", dwFileAttributes=0x80) returned 0
	[0056.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282126.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282126.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1525
	os_tid = 0x2410

	[0056.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF", dwFileAttributes=0x80) returned 0
	[0056.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282928.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282928.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1526
	os_tid = 0x2414

	[0056.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF", dwFileAttributes=0x80) returned 0
	[0056.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0282932.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0282932.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1527
	os_tid = 0x2418

	[0056.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF", dwFileAttributes=0x80) returned 0
	[0056.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285462.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285462.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1528
	os_tid = 0x241c

	[0056.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF", dwFileAttributes=0x80) returned 0
	[0056.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1529
	os_tid = 0x2420

	[0056.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF", dwFileAttributes=0x80) returned 0
	[0056.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1530
	os_tid = 0x2424

	[0056.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF", dwFileAttributes=0x80) returned 0
	[0056.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285782.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285782.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.193] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1531
	os_tid = 0x2428

	[0056.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF", dwFileAttributes=0x80) returned 0
	[0056.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285792.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285792.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1532
	os_tid = 0x242c

	[0056.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF", dwFileAttributes=0x80) returned 0
	[0056.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1533
	os_tid = 0x2430

	[0056.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF", dwFileAttributes=0x80) returned 0
	[0056.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285808.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285808.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1534
	os_tid = 0x2434

	[0056.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF", dwFileAttributes=0x80) returned 0
	[0056.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285820.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285820.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1535
	os_tid = 0x2438

	[0056.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF", dwFileAttributes=0x80) returned 0
	[0056.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0285822.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0285822.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1536
	os_tid = 0x243c

	[0056.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF", dwFileAttributes=0x80) returned 0
	[0056.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287018.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287018.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1537
	os_tid = 0x2440

	[0056.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF", dwFileAttributes=0x80) returned 0
	[0056.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287019.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287019.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1538
	os_tid = 0x2444

	[0056.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF", dwFileAttributes=0x80) returned 0
	[0056.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.349] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1539
	os_tid = 0x2448

	[0056.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF", dwFileAttributes=0x80) returned 0
	[0056.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1540
	os_tid = 0x244c

	[0056.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF", dwFileAttributes=0x80) returned 0
	[0056.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287408.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287408.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1541
	os_tid = 0x2450

	[0056.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF", dwFileAttributes=0x80) returned 0
	[0056.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287415.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287415.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.356] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1542
	os_tid = 0x2454

	[0056.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF", dwFileAttributes=0x80) returned 0
	[0056.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287417.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287417.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.358] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1543
	os_tid = 0x2458

	[0056.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG", dwFileAttributes=0x80) returned 0
	[0056.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287641.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287641.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1544
	os_tid = 0x245c

	[0056.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG", dwFileAttributes=0x80) returned 0
	[0056.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287642.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287642.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1545
	os_tid = 0x2460

	[0056.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG", dwFileAttributes=0x80) returned 0
	[0056.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287643.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287643.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1546
	os_tid = 0x2464

	[0056.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG", dwFileAttributes=0x80) returned 0
	[0056.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287644.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287644.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1547
	os_tid = 0x2468

	[0056.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG", dwFileAttributes=0x80) returned 0
	[0056.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0287645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0287645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1548
	os_tid = 0x246c

	[0056.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG", dwFileAttributes=0x80) returned 0
	[0056.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0289430.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0289430.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1549
	os_tid = 0x2470

	[0056.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF", dwFileAttributes=0x80) returned 0
	[0056.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0290548.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0290548.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1550
	os_tid = 0x2474

	[0056.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF", dwFileAttributes=0x80) returned 0
	[0056.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0291794.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0291794.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1551
	os_tid = 0x2478

	[0056.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF", dwFileAttributes=0x80) returned 0
	[0056.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292248.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292248.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1552
	os_tid = 0x247c

	[0056.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF", dwFileAttributes=0x80) returned 0
	[0056.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292270.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292270.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.376] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1553
	os_tid = 0x2480

	[0056.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF", dwFileAttributes=0x80) returned 0
	[0056.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.377] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1554
	os_tid = 0x2484

	[0056.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF", dwFileAttributes=0x80) returned 0
	[0056.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292278.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292278.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1555
	os_tid = 0x2488

	[0056.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF", dwFileAttributes=0x80) returned 0
	[0056.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0292286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0292286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.380] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1556
	os_tid = 0x248c

	[0056.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF", dwFileAttributes=0x80) returned 0
	[0056.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.381] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1557
	os_tid = 0x2490

	[0056.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF", dwFileAttributes=0x80) returned 0
	[0056.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0293832.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0293832.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.383] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1558
	os_tid = 0x2494

	[0056.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF", dwFileAttributes=0x80) returned 0
	[0056.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294989.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294989.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.385] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1559
	os_tid = 0x2498

	[0056.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF", dwFileAttributes=0x80) returned 0
	[0056.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0294991.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0294991.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1560
	os_tid = 0x249c

	[0056.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF", dwFileAttributes=0x80) returned 0
	[0056.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0295069.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0295069.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.388] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1561
	os_tid = 0x24a0

	[0056.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF", dwFileAttributes=0x80) returned 0
	[0056.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296277.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296277.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1562
	os_tid = 0x24a4

	[0056.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF", dwFileAttributes=0x80) returned 0
	[0056.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296279.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296279.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1563
	os_tid = 0x24a8

	[0056.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF", dwFileAttributes=0x80) returned 0
	[0056.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0296288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0296288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1564
	os_tid = 0x24ac

	[0056.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF", dwFileAttributes=0x80) returned 0
	[0056.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297229.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297229.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1565
	os_tid = 0x24b0

	[0056.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF", dwFileAttributes=0x80) returned 0
	[0056.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297269.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297269.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.394] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1566
	os_tid = 0x24b4

	[0056.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF", dwFileAttributes=0x80) returned 0
	[0056.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297725.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297725.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1567
	os_tid = 0x24b8

	[0056.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF", dwFileAttributes=0x80) returned 0
	[0056.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297727.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297727.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.397] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1568
	os_tid = 0x24bc

	[0056.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF", dwFileAttributes=0x80) returned 0
	[0056.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297757.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297757.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1569
	os_tid = 0x24c0

	[0056.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF", dwFileAttributes=0x80) returned 0
	[0056.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0297759.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0297759.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1570
	os_tid = 0x24c4

	[0056.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF", dwFileAttributes=0x80) returned 0
	[0056.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0300862.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0300862.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1571
	os_tid = 0x24c8

	[0056.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF", dwFileAttributes=0x80) returned 0
	[0056.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301044.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301044.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1572
	os_tid = 0x24cc

	[0056.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF", dwFileAttributes=0x80) returned 0
	[0056.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301052.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301052.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1573
	os_tid = 0x24d0

	[0056.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF", dwFileAttributes=0x80) returned 0
	[0056.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301418.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301418.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1574
	os_tid = 0x24d4

	[0056.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF", dwFileAttributes=0x80) returned 0
	[0056.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0301432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0301432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1575
	os_tid = 0x24d8

	[0056.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF", dwFileAttributes=0x80) returned 0
	[0056.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304371.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304371.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1576
	os_tid = 0x24dc

	[0056.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF", dwFileAttributes=0x80) returned 0
	[0056.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304405.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304405.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1577
	os_tid = 0x24e0

	[0056.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF", dwFileAttributes=0x80) returned 0
	[0056.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304853.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304853.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1578
	os_tid = 0x24e4

	[0056.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF", dwFileAttributes=0x80) returned 0
	[0056.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.415] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1579
	os_tid = 0x24e8

	[0056.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF", dwFileAttributes=0x80) returned 0
	[0056.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0304875.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0304875.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1580
	os_tid = 0x24ec

	[0056.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG", dwFileAttributes=0x80) returned 0
	[0056.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309480.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309480.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1581
	os_tid = 0x24f0

	[0056.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG", dwFileAttributes=0x80) returned 0
	[0056.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309567.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309567.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1582
	os_tid = 0x24f4

	[0056.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG", dwFileAttributes=0x80) returned 0
	[0056.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309585.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309585.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1583
	os_tid = 0x24f8

	[0056.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG", dwFileAttributes=0x80) returned 0
	[0056.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309598.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309598.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1584
	os_tid = 0x24fc

	[0056.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG", dwFileAttributes=0x80) returned 0
	[0056.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309664.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309664.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1585
	os_tid = 0x2500

	[0056.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG", dwFileAttributes=0x80) returned 0
	[0056.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309705.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309705.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1586
	os_tid = 0x2504

	[0056.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF", dwFileAttributes=0x80) returned 0
	[0056.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1587
	os_tid = 0x2508

	[0056.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF", dwFileAttributes=0x80) returned 0
	[0056.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309904.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309904.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1588
	os_tid = 0x250c

	[0056.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF", dwFileAttributes=0x80) returned 0
	[0056.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0309920.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0309920.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1589
	os_tid = 0x2510

	[0056.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG", dwFileAttributes=0x80) returned 0
	[0056.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313896.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313896.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1590
	os_tid = 0x2514

	[0056.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG", dwFileAttributes=0x80) returned 0
	[0056.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1591
	os_tid = 0x2518

	[0056.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG", dwFileAttributes=0x80) returned 0
	[0056.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1592
	os_tid = 0x251c

	[0056.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG", dwFileAttributes=0x80) returned 0
	[0056.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0313974.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0313974.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1593
	os_tid = 0x2520

	[0056.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG", dwFileAttributes=0x80) returned 0
	[0056.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0314068.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0314068.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.435] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1594
	os_tid = 0x2524

	[0056.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG", dwFileAttributes=0x80) returned 0
	[0056.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315580.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315580.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.436] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1595
	os_tid = 0x2528

	[0056.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG", dwFileAttributes=0x80) returned 0
	[0056.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0315612.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0315612.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.437] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1596
	os_tid = 0x252c

	[0056.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF", dwFileAttributes=0x80) returned 0
	[0056.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318448.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318448.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1597
	os_tid = 0x2530

	[0056.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF", dwFileAttributes=0x80) returned 0
	[0056.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318804.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318804.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.440] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1598
	os_tid = 0x2534

	[0056.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF", dwFileAttributes=0x80) returned 0
	[0056.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0318810.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0318810.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.441] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1599
	os_tid = 0x2538

	[0056.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG", dwFileAttributes=0x80) returned 0
	[0056.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0321179.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0321179.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.444] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1600
	os_tid = 0x253c

	[0056.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF", dwFileAttributes=0x80) returned 0
	[0056.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.445] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1601
	os_tid = 0x2540

	[0056.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF", dwFileAttributes=0x80) returned 0
	[0056.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0324704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0324704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.446] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1602
	os_tid = 0x2544

	[0056.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG", dwFileAttributes=0x80) returned 0
	[0056.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0337280.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0337280.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.447] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1603
	os_tid = 0x2548

	[0056.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG", dwFileAttributes=0x80) returned 0
	[0056.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341328.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341328.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.448] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1604
	os_tid = 0x254c

	[0056.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG", dwFileAttributes=0x80) returned 0
	[0056.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341344.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341344.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.449] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1605
	os_tid = 0x2550

	[0056.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG", dwFileAttributes=0x80) returned 0
	[0056.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341439.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341439.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1606
	os_tid = 0x2554

	[0056.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG", dwFileAttributes=0x80) returned 0
	[0056.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341447.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341447.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.451] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1607
	os_tid = 0x2558

	[0056.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG", dwFileAttributes=0x80) returned 0
	[0056.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341448.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341448.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.452] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1608
	os_tid = 0x255c

	[0056.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG", dwFileAttributes=0x80) returned 0
	[0056.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341455.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341455.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.453] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1609
	os_tid = 0x2560

	[0056.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG", dwFileAttributes=0x80) returned 0
	[0056.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341475.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341475.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1610
	os_tid = 0x2564

	[0056.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG", dwFileAttributes=0x80) returned 0
	[0056.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341499.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341499.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.455] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1611
	os_tid = 0x2568

	[0056.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG", dwFileAttributes=0x80) returned 0
	[0056.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341534.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341534.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.457] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1612
	os_tid = 0x256c

	[0056.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG", dwFileAttributes=0x80) returned 0
	[0056.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341551.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341551.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1613
	os_tid = 0x2570

	[0056.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG", dwFileAttributes=0x80) returned 0
	[0056.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341554.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341554.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1614
	os_tid = 0x2574

	[0056.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG", dwFileAttributes=0x80) returned 0
	[0056.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341557.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341557.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1615
	os_tid = 0x2578

	[0056.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG", dwFileAttributes=0x80) returned 0
	[0056.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341559.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341559.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.460] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1616
	os_tid = 0x257c

	[0056.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG", dwFileAttributes=0x80) returned 0
	[0056.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341561.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341561.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.461] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1617
	os_tid = 0x2580

	[0056.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG", dwFileAttributes=0x80) returned 0
	[0056.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341634.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341634.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.463] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1618
	os_tid = 0x2584

	[0056.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG", dwFileAttributes=0x80) returned 0
	[0056.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341636.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341636.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.464] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1619
	os_tid = 0x2588

	[0056.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG", dwFileAttributes=0x80) returned 0
	[0056.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341645.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341645.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1620
	os_tid = 0x258c

	[0056.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG", dwFileAttributes=0x80) returned 0
	[0056.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341653.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341653.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.469] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1621
	os_tid = 0x2590

	[0056.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG", dwFileAttributes=0x80) returned 0
	[0056.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341654.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341654.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.471] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1622
	os_tid = 0x2594

	[0056.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG", dwFileAttributes=0x80) returned 0
	[0056.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341738.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341738.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.472] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1623
	os_tid = 0x2598

	[0056.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG", dwFileAttributes=0x80) returned 0
	[0056.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0341742.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0341742.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.473] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1624
	os_tid = 0x259c

	[0056.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG", dwFileAttributes=0x80) returned 0
	[0056.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382836.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382836.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.473] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1625
	os_tid = 0x25a0

	[0056.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG", dwFileAttributes=0x80) returned 0
	[0056.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382925.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382925.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.474] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1626
	os_tid = 0x25a4

	[0056.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG", dwFileAttributes=0x80) returned 0
	[0056.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382926.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382926.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.475] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1627
	os_tid = 0x25a8

	[0056.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG", dwFileAttributes=0x80) returned 0
	[0056.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382927.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382927.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.477] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1628
	os_tid = 0x25ac

	[0056.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG", dwFileAttributes=0x80) returned 0
	[0056.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382930.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382930.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.479] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1629
	os_tid = 0x25b0

	[0056.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG", dwFileAttributes=0x80) returned 0
	[0056.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382931.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382931.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.480] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1630
	os_tid = 0x25b4

	[0056.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG", dwFileAttributes=0x80) returned 0
	[0056.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382938.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382938.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1631
	os_tid = 0x25b8

	[0056.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG", dwFileAttributes=0x80) returned 0
	[0056.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382939.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382939.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1632
	os_tid = 0x25bc

	[0056.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG", dwFileAttributes=0x80) returned 0
	[0056.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382942.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382942.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1633
	os_tid = 0x25c0

	[0056.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG", dwFileAttributes=0x80) returned 0
	[0056.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382944.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382944.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1634
	os_tid = 0x25c4

	[0056.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG", dwFileAttributes=0x80) returned 0
	[0056.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382947.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382947.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1635
	os_tid = 0x25c8

	[0056.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG", dwFileAttributes=0x80) returned 0
	[0056.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382948.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382948.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.490] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1636
	os_tid = 0x25cc

	[0056.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG", dwFileAttributes=0x80) returned 0
	[0056.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382950.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382950.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1637
	os_tid = 0x25d0

	[0056.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG", dwFileAttributes=0x80) returned 0
	[0056.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1638
	os_tid = 0x25d4

	[0056.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG", dwFileAttributes=0x80) returned 0
	[0056.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382954.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382954.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1639
	os_tid = 0x25d8

	[0056.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG", dwFileAttributes=0x80) returned 0
	[0056.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382955.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382955.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1640
	os_tid = 0x25dc

	[0056.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG", dwFileAttributes=0x80) returned 0
	[0056.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382957.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382957.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.497] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1641
	os_tid = 0x25e0

	[0056.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG", dwFileAttributes=0x80) returned 0
	[0056.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382958.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382958.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1642
	os_tid = 0x25e4

	[0056.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG", dwFileAttributes=0x80) returned 0
	[0056.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382959.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382959.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.499] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1643
	os_tid = 0x25e8

	[0056.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG", dwFileAttributes=0x80) returned 0
	[0056.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382960.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382960.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1644
	os_tid = 0x25ec

	[0056.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG", dwFileAttributes=0x80) returned 0
	[0056.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382961.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382961.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1645
	os_tid = 0x25f0

	[0056.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG", dwFileAttributes=0x80) returned 0
	[0056.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382962.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382962.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1646
	os_tid = 0x25f4

	[0056.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG", dwFileAttributes=0x80) returned 0
	[0056.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1647
	os_tid = 0x25f8

	[0056.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG", dwFileAttributes=0x80) returned 0
	[0056.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382965.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382965.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.505] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1648
	os_tid = 0x25fc

	[0056.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG", dwFileAttributes=0x80) returned 0
	[0056.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382966.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382966.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.506] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1649
	os_tid = 0x2600

	[0056.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG", dwFileAttributes=0x80) returned 0
	[0056.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382967.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382967.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.508] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1650
	os_tid = 0x2604

	[0056.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG", dwFileAttributes=0x80) returned 0
	[0056.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382968.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382968.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.509] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1651
	os_tid = 0x2608

	[0056.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG", dwFileAttributes=0x80) returned 0
	[0056.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382969.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382969.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.510] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1652
	os_tid = 0x260c

	[0056.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG", dwFileAttributes=0x80) returned 0
	[0056.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0382970.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0382970.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.511] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1653
	os_tid = 0x2610

	[0056.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG", dwFileAttributes=0x80) returned 0
	[0056.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384862.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384862.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.512] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1654
	os_tid = 0x2614

	[0056.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG", dwFileAttributes=0x80) returned 0
	[0056.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384885.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384885.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.513] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1655
	os_tid = 0x2618

	[0056.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG", dwFileAttributes=0x80) returned 0
	[0056.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384888.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384888.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.514] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1656
	os_tid = 0x261c

	[0056.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG", dwFileAttributes=0x80) returned 0
	[0056.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.515] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1657
	os_tid = 0x2620

	[0056.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG", dwFileAttributes=0x80) returned 0
	[0056.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0384900.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0384900.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.516] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1658
	os_tid = 0x2624

	[0056.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG", dwFileAttributes=0x80) returned 0
	[0056.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386120.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386120.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.517] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1659
	os_tid = 0x2628

	[0056.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG", dwFileAttributes=0x80) returned 0
	[0056.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386267.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386267.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.518] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1660
	os_tid = 0x262c

	[0056.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG", dwFileAttributes=0x80) returned 0
	[0056.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386270.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386270.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.520] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1661
	os_tid = 0x2630

	[0056.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG", dwFileAttributes=0x80) returned 0
	[0056.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386485.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386485.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.521] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1662
	os_tid = 0x2634

	[0056.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG", dwFileAttributes=0x80) returned 0
	[0056.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0386764.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0386764.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1663
	os_tid = 0x2638

	[0056.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG", dwFileAttributes=0x80) returned 0
	[0056.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387337.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387337.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.523] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1664
	os_tid = 0x263c

	[0056.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG", dwFileAttributes=0x80) returned 0
	[0056.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387578.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387578.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.524] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1665
	os_tid = 0x2640

	[0056.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG", dwFileAttributes=0x80) returned 0
	[0056.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387591.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387591.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.525] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1666
	os_tid = 0x2644

	[0056.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG", dwFileAttributes=0x80) returned 0
	[0056.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387604.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387604.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.526] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1667
	os_tid = 0x2648

	[0056.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG", dwFileAttributes=0x80) returned 0
	[0056.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387882.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387882.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.529] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1668
	os_tid = 0x264c

	[0056.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG", dwFileAttributes=0x80) returned 0
	[0056.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0387895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0387895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.530] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1669
	os_tid = 0x2650

	[0056.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG", dwFileAttributes=0x80) returned 0
	[0056.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0390072.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0390072.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.531] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1670
	os_tid = 0x2654

	[0056.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG", dwFileAttributes=0x80) returned 0
	[0056.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400001.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400001.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.534] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1671
	os_tid = 0x2658

	[0056.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG", dwFileAttributes=0x80) returned 0
	[0056.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400002.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400002.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.535] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1672
	os_tid = 0x265c

	[0056.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG", dwFileAttributes=0x80) returned 0
	[0056.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400003.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400003.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.600] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1673
	os_tid = 0x2660

	[0056.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG", dwFileAttributes=0x80) returned 0
	[0056.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400004.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400004.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.601] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1674
	os_tid = 0x2664

	[0056.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG", dwFileAttributes=0x80) returned 0
	[0056.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0400005.PNG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0400005.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.603] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1675
	os_tid = 0x2668

	[0056.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID", dwFileAttributes=0x80) returned 0
	[0056.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.605] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1676
	os_tid = 0x266c

	[0056.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID", dwFileAttributes=0x80) returned 0
	[0056.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.606] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1677
	os_tid = 0x2670

	[0056.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF", dwFileAttributes=0x80) returned 0
	[0056.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00021_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00021_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1678
	os_tid = 0x2674

	[0056.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF", dwFileAttributes=0x80) returned 0
	[0056.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.609] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1679
	os_tid = 0x2678

	[0056.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF", dwFileAttributes=0x80) returned 0
	[0056.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MP00646_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\mp00646_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.610] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1680
	os_tid = 0x267c

	[0056.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID", dwFileAttributes=0x80) returned 0
	[0056.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.611] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1681
	os_tid = 0x2680

	[0056.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF", dwFileAttributes=0x80) returned 0
	[0056.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00042_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00042_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.613] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1682
	os_tid = 0x2684

	[0056.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF", dwFileAttributes=0x80) returned 0
	[0056.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.614] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1683
	os_tid = 0x2688

	[0056.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF", dwFileAttributes=0x80) returned 0
	[0056.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.615] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1684
	os_tid = 0x268c

	[0056.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF", dwFileAttributes=0x80) returned 0
	[0056.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.616] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1685
	os_tid = 0x2690

	[0056.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF", dwFileAttributes=0x80) returned 0
	[0056.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00238_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00238_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.617] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1686
	os_tid = 0x2694

	[0056.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF", dwFileAttributes=0x80) returned 0
	[0056.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.618] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1687
	os_tid = 0x2698

	[0056.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF", dwFileAttributes=0x80) returned 0
	[0056.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.620] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1688
	os_tid = 0x269c

	[0056.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF", dwFileAttributes=0x80) returned 0
	[0056.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.622] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1689
	os_tid = 0x26a0

	[0056.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF", dwFileAttributes=0x80) returned 0
	[0056.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.623] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1690
	os_tid = 0x26a4

	[0056.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF", dwFileAttributes=0x80) returned 0
	[0056.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.625] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1691
	os_tid = 0x26a8

	[0056.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF", dwFileAttributes=0x80) returned 0
	[0056.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.625] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1692
	os_tid = 0x26ac

	[0056.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF", dwFileAttributes=0x80) returned 0
	[0056.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.627] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1693
	os_tid = 0x26b0

	[0056.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF", dwFileAttributes=0x80) returned 0
	[0056.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00396_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00396_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.629] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1694
	os_tid = 0x26b4

	[0056.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF", dwFileAttributes=0x80) returned 0
	[0056.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.629] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1695
	os_tid = 0x26b8

	[0056.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF", dwFileAttributes=0x80) returned 0
	[0056.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00433_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00433_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.630] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1696
	os_tid = 0x26bc

	[0056.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF", dwFileAttributes=0x80) returned 0
	[0056.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1697
	os_tid = 0x26c0

	[0056.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF", dwFileAttributes=0x80) returned 0
	[0056.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.633] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1698
	os_tid = 0x26c4

	[0056.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF", dwFileAttributes=0x80) returned 0
	[0056.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.635] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1699
	os_tid = 0x26c8

	[0056.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF", dwFileAttributes=0x80) returned 0
	[0056.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00458_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00458_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1700
	os_tid = 0x26cc

	[0056.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF", dwFileAttributes=0x80) returned 0
	[0056.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1701
	os_tid = 0x26d0

	[0056.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF", dwFileAttributes=0x80) returned 0
	[0056.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00487_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00487_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.639] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1702
	os_tid = 0x26d4

	[0056.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF", dwFileAttributes=0x80) returned 0
	[0056.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1703
	os_tid = 0x26d8

	[0056.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF", dwFileAttributes=0x80) returned 0
	[0056.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00512_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00512_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1704
	os_tid = 0x26dc

	[0056.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF", dwFileAttributes=0x80) returned 0
	[0056.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00523_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00523_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.644] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1705
	os_tid = 0x26e0

	[0056.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF", dwFileAttributes=0x80) returned 0
	[0056.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.645] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1706
	os_tid = 0x26e4

	[0056.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF", dwFileAttributes=0x80) returned 0
	[0056.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00530_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00530_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1707
	os_tid = 0x26e8

	[0056.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF", dwFileAttributes=0x80) returned 0
	[0056.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00532_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00532_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1708
	os_tid = 0x26ec

	[0056.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF", dwFileAttributes=0x80) returned 0
	[0056.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00538_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00538_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1709
	os_tid = 0x26f0

	[0056.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF", dwFileAttributes=0x80) returned 0
	[0056.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00641_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00641_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.652] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1710
	os_tid = 0x26f4

	[0056.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF", dwFileAttributes=0x80) returned 0
	[0056.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00784_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00784_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1711
	os_tid = 0x26f8

	[0056.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF", dwFileAttributes=0x80) returned 0
	[0056.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00798_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00798_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.656] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1712
	os_tid = 0x26fc

	[0056.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF", dwFileAttributes=0x80) returned 0
	[0056.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00806_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00806_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.657] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1713
	os_tid = 0x2700

	[0056.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF", dwFileAttributes=0x80) returned 0
	[0056.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00807_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00807_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.659] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1714
	os_tid = 0x2704

	[0056.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF", dwFileAttributes=0x80) returned 0
	[0056.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1715
	os_tid = 0x2708

	[0056.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF", dwFileAttributes=0x80) returned 0
	[0056.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00809_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00809_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.665] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1716
	os_tid = 0x270c

	[0056.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF", dwFileAttributes=0x80) returned 0
	[0056.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00810_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00810_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.666] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1717
	os_tid = 0x2710

	[0056.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF", dwFileAttributes=0x80) returned 0
	[0056.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.670] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1718
	os_tid = 0x2714

	[0056.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF", dwFileAttributes=0x80) returned 0
	[0056.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01064_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01064_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1719
	os_tid = 0x2718

	[0056.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF", dwFileAttributes=0x80) returned 0
	[0056.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.673] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1720
	os_tid = 0x271c

	[0056.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF", dwFileAttributes=0x80) returned 0
	[0056.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01069_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01069_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.674] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1721
	os_tid = 0x2720

	[0056.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF", dwFileAttributes=0x80) returned 0
	[0056.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01123_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01123_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1722
	os_tid = 0x2724

	[0056.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF", dwFileAttributes=0x80) returned 0
	[0056.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.676] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1723
	os_tid = 0x2728

	[0056.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF", dwFileAttributes=0x80) returned 0
	[0056.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1724
	os_tid = 0x272c

	[0056.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF", dwFileAttributes=0x80) returned 0
	[0056.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1725
	os_tid = 0x2730

	[0056.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF", dwFileAttributes=0x80) returned 0
	[0056.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.679] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1726
	os_tid = 0x2734

	[0056.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF", dwFileAttributes=0x80) returned 0
	[0056.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01149_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01149_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1727
	os_tid = 0x2738

	[0056.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF", dwFileAttributes=0x80) returned 0
	[0056.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.682] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1728
	os_tid = 0x273c

	[0056.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF", dwFileAttributes=0x80) returned 0
	[0056.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01154_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01154_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1729
	os_tid = 0x2740

	[0056.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF", dwFileAttributes=0x80) returned 0
	[0056.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1730
	os_tid = 0x2744

	[0056.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF", dwFileAttributes=0x80) returned 0
	[0056.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1731
	os_tid = 0x2748

	[0056.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF", dwFileAttributes=0x80) returned 0
	[0056.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1732
	os_tid = 0x274c

	[0056.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF", dwFileAttributes=0x80) returned 0
	[0056.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1733
	os_tid = 0x2750

	[0056.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF", dwFileAttributes=0x80) returned 0
	[0056.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1734
	os_tid = 0x2754

	[0056.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF", dwFileAttributes=0x80) returned 0
	[0056.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01354_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01354_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1735
	os_tid = 0x2758

	[0056.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF", dwFileAttributes=0x80) returned 0
	[0056.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1736
	os_tid = 0x275c

	[0056.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF", dwFileAttributes=0x80) returned 0
	[0056.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01357_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01357_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1737
	os_tid = 0x2760

	[0056.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF", dwFileAttributes=0x80) returned 0
	[0056.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01358_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01358_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1738
	os_tid = 0x2764

	[0056.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF", dwFileAttributes=0x80) returned 0
	[0056.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1739
	os_tid = 0x2768

	[0056.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF", dwFileAttributes=0x80) returned 0
	[0056.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1740
	os_tid = 0x276c

	[0056.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF", dwFileAttributes=0x80) returned 0
	[0056.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01421_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01421_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1741
	os_tid = 0x2770

	[0056.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF", dwFileAttributes=0x80) returned 0
	[0056.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.709] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1742
	os_tid = 0x2774

	[0056.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF", dwFileAttributes=0x80) returned 0
	[0056.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1743
	os_tid = 0x2778

	[0056.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF", dwFileAttributes=0x80) returned 0
	[0056.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01472_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01472_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.705] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1744
	os_tid = 0x277c

	[0056.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF", dwFileAttributes=0x80) returned 0
	[0056.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01473_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01473_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.706] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1745
	os_tid = 0x2780

	[0056.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF", dwFileAttributes=0x80) returned 0
	[0056.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01474_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01474_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.707] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1746
	os_tid = 0x2784

	[0056.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF", dwFileAttributes=0x80) returned 0
	[0056.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01627_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01627_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1747
	os_tid = 0x2788

	[0056.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF", dwFileAttributes=0x80) returned 0
	[0056.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01680_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01680_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.710] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1748
	os_tid = 0x278c

	[0056.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF", dwFileAttributes=0x80) returned 0
	[0056.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01682_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01682_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.711] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1749
	os_tid = 0x2790

	[0056.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF", dwFileAttributes=0x80) returned 0
	[0056.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01701_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01701_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.712] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1750
	os_tid = 0x2794

	[0056.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF", dwFileAttributes=0x80) returned 0
	[0056.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01848_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01848_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.714] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1751
	os_tid = 0x2798

	[0056.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF", dwFileAttributes=0x80) returned 0
	[0056.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01849_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01849_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.715] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1752
	os_tid = 0x279c

	[0056.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF", dwFileAttributes=0x80) returned 0
	[0056.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01852_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01852_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1753
	os_tid = 0x27a0

	[0056.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF", dwFileAttributes=0x80) returned 0
	[0056.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01858_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01858_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.717] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1754
	os_tid = 0x27a4

	[0056.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF", dwFileAttributes=0x80) returned 0
	[0056.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA01866_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na01866_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1755
	os_tid = 0x27a8

	[0056.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF", dwFileAttributes=0x80) returned 0
	[0056.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.719] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1756
	os_tid = 0x27ac

	[0056.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF", dwFileAttributes=0x80) returned 0
	[0056.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1757
	os_tid = 0x27b0

	[0056.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF", dwFileAttributes=0x80) returned 0
	[0056.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02066_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02066_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.722] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1758
	os_tid = 0x27b4

	[0056.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF", dwFileAttributes=0x80) returned 0
	[0056.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02091_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02091_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1759
	os_tid = 0x27b8

	[0056.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF", dwFileAttributes=0x80) returned 0
	[0056.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.724] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1760
	os_tid = 0x27bc

	[0056.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF", dwFileAttributes=0x80) returned 0
	[0056.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02093_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02093_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.725] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1761
	os_tid = 0x27c0

	[0056.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF", dwFileAttributes=0x80) returned 0
	[0056.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02124_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02124_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.726] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1762
	os_tid = 0x27c4

	[0056.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF", dwFileAttributes=0x80) returned 0
	[0056.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02125_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02125_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.729] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1763
	os_tid = 0x27c8

	[0056.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF", dwFileAttributes=0x80) returned 0
	[0056.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1764
	os_tid = 0x27cc

	[0056.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF", dwFileAttributes=0x80) returned 0
	[0056.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1765
	os_tid = 0x27d0

	[0056.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF", dwFileAttributes=0x80) returned 0
	[0056.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1766
	os_tid = 0x27d4

	[0056.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF", dwFileAttributes=0x80) returned 0
	[0056.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02264_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02264_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1767
	os_tid = 0x27d8

	[0056.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF", dwFileAttributes=0x80) returned 0
	[0056.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02356_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02356_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1768
	os_tid = 0x27dc

	[0056.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF", dwFileAttributes=0x80) returned 0
	[0056.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1769
	os_tid = 0x27e0

	[0056.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF", dwFileAttributes=0x80) returned 0
	[0056.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02368_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02368_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1770
	os_tid = 0x27e4

	[0056.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF", dwFileAttributes=0x80) returned 0
	[0056.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02371_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02371_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1771
	os_tid = 0x27e8

	[0056.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF", dwFileAttributes=0x80) returned 0
	[0056.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1772
	os_tid = 0x27ec

	[0056.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF", dwFileAttributes=0x80) returned 0
	[0056.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1773
	os_tid = 0x27f0

	[0056.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF", dwFileAttributes=0x80) returned 0
	[0056.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02386_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02386_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1774
	os_tid = 0x27f4

	[0056.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF", dwFileAttributes=0x80) returned 0
	[0056.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02388_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02388_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1775
	os_tid = 0x27f8

	[0056.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF", dwFileAttributes=0x80) returned 0
	[0056.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02389_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02389_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1776
	os_tid = 0x27fc

	[0056.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF", dwFileAttributes=0x80) returned 0
	[0056.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1777
	os_tid = 0x2804

	[0056.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF", dwFileAttributes=0x80) returned 0
	[0056.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02398_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02398_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1778
	os_tid = 0x2808

	[0056.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF", dwFileAttributes=0x80) returned 0
	[0056.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02400_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02400_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1779
	os_tid = 0x280c

	[0056.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF", dwFileAttributes=0x80) returned 0
	[0056.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02404_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02404_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1780
	os_tid = 0x2810

	[0056.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF", dwFileAttributes=0x80) returned 0
	[0056.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1781
	os_tid = 0x2814

	[0056.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF", dwFileAttributes=0x80) returned 0
	[0056.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1782
	os_tid = 0x2818

	[0056.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF", dwFileAttributes=0x80) returned 0
	[0056.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1783
	os_tid = 0x281c

	[0056.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF", dwFileAttributes=0x80) returned 0
	[0056.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02417_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02417_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.754] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1784
	os_tid = 0x2820

	[0056.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF", dwFileAttributes=0x80) returned 0
	[0056.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.756] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1785
	os_tid = 0x2824

	[0056.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF", dwFileAttributes=0x80) returned 0
	[0056.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02424_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02424_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.757] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1786
	os_tid = 0x2828

	[0056.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF", dwFileAttributes=0x80) returned 0
	[0056.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1787
	os_tid = 0x282c

	[0056.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF", dwFileAttributes=0x80) returned 0
	[0056.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.759] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1788
	os_tid = 0x2830

	[0056.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF", dwFileAttributes=0x80) returned 0
	[0056.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.761] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1789
	os_tid = 0x2834

	[0056.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF", dwFileAttributes=0x80) returned 0
	[0056.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.762] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1790
	os_tid = 0x2838

	[0056.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF", dwFileAttributes=0x80) returned 0
	[0056.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.763] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1791
	os_tid = 0x283c

	[0056.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF", dwFileAttributes=0x80) returned 0
	[0056.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1792
	os_tid = 0x2840

	[0056.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF", dwFileAttributes=0x80) returned 0
	[0056.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1793
	os_tid = 0x2844

	[0056.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF", dwFileAttributes=0x80) returned 0
	[0056.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02446_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02446_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1794
	os_tid = 0x2848

	[0056.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF", dwFileAttributes=0x80) returned 0
	[0056.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.768] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1795
	os_tid = 0x284c

	[0056.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF", dwFileAttributes=0x80) returned 0
	[0056.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1796
	os_tid = 0x2850

	[0056.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF", dwFileAttributes=0x80) returned 0
	[0056.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.771] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1797
	os_tid = 0x2854

	[0056.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF", dwFileAttributes=0x80) returned 0
	[0056.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NA02453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\na02453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.789] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1798
	os_tid = 0x2858

	[0056.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID", dwFileAttributes=0x80) returned 0
	[0056.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.773] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1799
	os_tid = 0x285c

	[0056.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID", dwFileAttributes=0x80) returned 0
	[0056.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.849] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1800
	os_tid = 0x2860

	[0056.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID", dwFileAttributes=0x80) returned 0
	[0056.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.851] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1801
	os_tid = 0x2864

	[0056.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID", dwFileAttributes=0x80) returned 0
	[0056.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.852] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1802
	os_tid = 0x2868

	[0056.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID", dwFileAttributes=0x80) returned 0
	[0056.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.853] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1803
	os_tid = 0x286c

	[0056.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID", dwFileAttributes=0x80) returned 0
	[0056.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.855] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1804
	os_tid = 0x2870

	[0056.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID", dwFileAttributes=0x80) returned 0
	[0056.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.856] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1805
	os_tid = 0x2874

	[0056.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID", dwFileAttributes=0x80) returned 0
	[0056.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.857] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1806
	os_tid = 0x2878

	[0056.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID", dwFileAttributes=0x80) returned 0
	[0056.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.860] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1807
	os_tid = 0x287c

	[0056.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID", dwFileAttributes=0x80) returned 0
	[0056.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.861] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1808
	os_tid = 0x2880

	[0056.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID", dwFileAttributes=0x80) returned 0
	[0056.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.862] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1809
	os_tid = 0x2884

	[0056.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID", dwFileAttributes=0x80) returned 0
	[0056.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.863] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1810
	os_tid = 0x2888

	[0056.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID", dwFileAttributes=0x80) returned 0
	[0056.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.864] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1811
	os_tid = 0x288c

	[0056.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID", dwFileAttributes=0x80) returned 0
	[0056.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.865] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1812
	os_tid = 0x2890

	[0056.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF", dwFileAttributes=0x80) returned 0
	[0056.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.866] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1813
	os_tid = 0x2894

	[0056.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF", dwFileAttributes=0x80) returned 0
	[0056.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.868] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1814
	os_tid = 0x2898

	[0056.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF", dwFileAttributes=0x80) returned 0
	[0056.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00034_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00034_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.869] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1815
	os_tid = 0x289c

	[0056.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF", dwFileAttributes=0x80) returned 0
	[0056.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1816
	os_tid = 0x28a0

	[0056.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF", dwFileAttributes=0x80) returned 0
	[0056.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.872] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1817
	os_tid = 0x28a4

	[0056.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF", dwFileAttributes=0x80) returned 0
	[0056.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00052_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00052_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.873] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1818
	os_tid = 0x28a8

	[0056.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF", dwFileAttributes=0x80) returned 0
	[0056.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.875] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1819
	os_tid = 0x28ac

	[0056.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF", dwFileAttributes=0x80) returned 0
	[0056.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00272_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00272_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.877] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1820
	os_tid = 0x28b0

	[0056.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF", dwFileAttributes=0x80) returned 0
	[0056.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00468_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00468_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1821
	os_tid = 0x28b4

	[0056.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF", dwFileAttributes=0x80) returned 0
	[0056.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00478_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00478_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.880] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1822
	os_tid = 0x28b8

	[0056.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF", dwFileAttributes=0x80) returned 0
	[0056.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00485_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00485_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.881] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1823
	os_tid = 0x28bc

	[0056.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF", dwFileAttributes=0x80) returned 0
	[0056.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00489_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00489_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1824
	os_tid = 0x28c0

	[0056.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF", dwFileAttributes=0x80) returned 0
	[0056.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00531_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00531_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.883] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1825
	os_tid = 0x28c4

	[0056.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF", dwFileAttributes=0x80) returned 0
	[0056.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00542_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00542_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.884] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1826
	os_tid = 0x28c8

	[0056.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF", dwFileAttributes=0x80) returned 0
	[0056.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1827
	os_tid = 0x28cc

	[0056.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF", dwFileAttributes=0x80) returned 0
	[0056.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.889] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1828
	os_tid = 0x28d0

	[0056.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF", dwFileAttributes=0x80) returned 0
	[0056.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1829
	os_tid = 0x28d4

	[0056.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF", dwFileAttributes=0x80) returned 0
	[0056.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1830
	os_tid = 0x28d8

	[0056.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF", dwFileAttributes=0x80) returned 0
	[0056.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00608_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00608_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1831
	os_tid = 0x28dc

	[0056.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF", dwFileAttributes=0x80) returned 0
	[0056.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.895] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1832
	os_tid = 0x28e0

	[0056.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF", dwFileAttributes=0x80) returned 0
	[0056.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00640_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00640_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1833
	os_tid = 0x28e4

	[0056.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF", dwFileAttributes=0x80) returned 0
	[0056.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1834
	os_tid = 0x28e8

	[0056.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF", dwFileAttributes=0x80) returned 0
	[0056.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.899] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1835
	os_tid = 0x28ec

	[0056.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF", dwFileAttributes=0x80) returned 0
	[0056.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00686_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00686_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.900] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1836
	os_tid = 0x28f0

	[0056.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF", dwFileAttributes=0x80) returned 0
	[0056.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.902] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1837
	os_tid = 0x28f4

	[0056.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF", dwFileAttributes=0x80) returned 0
	[0056.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00720_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00720_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1838
	os_tid = 0x28f8

	[0056.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF", dwFileAttributes=0x80) returned 0
	[0056.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00723_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00723_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.905] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1839
	os_tid = 0x28fc

	[0056.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF", dwFileAttributes=0x80) returned 0
	[0056.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.906] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1840
	os_tid = 0x2900

	[0056.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF", dwFileAttributes=0x80) returned 0
	[0056.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00737_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00737_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.907] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1841
	os_tid = 0x2904

	[0056.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF", dwFileAttributes=0x80) returned 0
	[0056.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00833_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00833_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.908] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1842
	os_tid = 0x2908

	[0056.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF", dwFileAttributes=0x80) returned 0
	[0056.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00898_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00898_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.909] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1843
	os_tid = 0x290c

	[0056.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF", dwFileAttributes=0x80) returned 0
	[0056.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00934_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00934_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.910] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1844
	os_tid = 0x2910

	[0056.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF", dwFileAttributes=0x80) returned 0
	[0056.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE00998_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe00998_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.911] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1845
	os_tid = 0x2914

	[0056.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF", dwFileAttributes=0x80) returned 0
	[0056.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.912] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1846
	os_tid = 0x2918

	[0056.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF", dwFileAttributes=0x80) returned 0
	[0056.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.913] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1847
	os_tid = 0x291c

	[0056.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF", dwFileAttributes=0x80) returned 0
	[0056.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.914] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1848
	os_tid = 0x2920

	[0056.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF", dwFileAttributes=0x80) returned 0
	[0056.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01661_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01661_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.916] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1849
	os_tid = 0x2924

	[0056.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF", dwFileAttributes=0x80) returned 0
	[0056.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE01797_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe01797_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1850
	os_tid = 0x2928

	[0056.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF", dwFileAttributes=0x80) returned 0
	[0056.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02120_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02120_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.919] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1851
	os_tid = 0x292c

	[0056.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF", dwFileAttributes=0x80) returned 0
	[0056.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.920] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1852
	os_tid = 0x2930

	[0056.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF", dwFileAttributes=0x80) returned 0
	[0056.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.921] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1853
	os_tid = 0x2934

	[0056.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF", dwFileAttributes=0x80) returned 0
	[0056.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.925] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1854
	os_tid = 0x2938

	[0056.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF", dwFileAttributes=0x80) returned 0
	[0056.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.926] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1855
	os_tid = 0x293c

	[0056.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF", dwFileAttributes=0x80) returned 0
	[0056.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.927] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1856
	os_tid = 0x2940

	[0056.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF", dwFileAttributes=0x80) returned 0
	[0056.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.928] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1857
	os_tid = 0x2944

	[0056.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF", dwFileAttributes=0x80) returned 0
	[0056.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02278_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02278_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1858
	os_tid = 0x2948

	[0056.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF", dwFileAttributes=0x80) returned 0
	[0056.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02280_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02280_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.931] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1859
	os_tid = 0x294c

	[0056.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF", dwFileAttributes=0x80) returned 0
	[0056.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.933] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1860
	os_tid = 0x2950

	[0056.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF", dwFileAttributes=0x80) returned 0
	[0056.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02285_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02285_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.935] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1861
	os_tid = 0x2954

	[0056.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF", dwFileAttributes=0x80) returned 0
	[0056.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02287_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02287_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1862
	os_tid = 0x2958

	[0056.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF", dwFileAttributes=0x80) returned 0
	[0056.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02288_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02288_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1863
	os_tid = 0x295c

	[0056.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF", dwFileAttributes=0x80) returned 0
	[0056.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02293_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02293_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.938] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1864
	os_tid = 0x2960

	[0056.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF", dwFileAttributes=0x80) returned 0
	[0056.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1865
	os_tid = 0x2964

	[0056.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF", dwFileAttributes=0x80) returned 0
	[0056.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.940] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1866
	os_tid = 0x2968

	[0056.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF", dwFileAttributes=0x80) returned 0
	[0056.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02522_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02522_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1867
	os_tid = 0x296c

	[0056.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF", dwFileAttributes=0x80) returned 0
	[0056.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02950_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02950_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.943] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1868
	os_tid = 0x2970

	[0056.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF", dwFileAttributes=0x80) returned 0
	[0056.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE02957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe02957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1869
	os_tid = 0x2974

	[0056.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF", dwFileAttributes=0x80) returned 0
	[0056.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.945] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1870
	os_tid = 0x2978

	[0056.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF", dwFileAttributes=0x80) returned 0
	[0056.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1871
	os_tid = 0x297c

	[0056.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF", dwFileAttributes=0x80) returned 0
	[0056.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.948] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1872
	os_tid = 0x2980

	[0056.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF", dwFileAttributes=0x80) returned 0
	[0056.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03331_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03331_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.949] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1873
	os_tid = 0x2984

	[0056.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF", dwFileAttributes=0x80) returned 0
	[0056.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03339_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03339_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.950] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1874
	os_tid = 0x2988

	[0056.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF", dwFileAttributes=0x80) returned 0
	[0056.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03451_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03451_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1875
	os_tid = 0x298c

	[0056.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF", dwFileAttributes=0x80) returned 0
	[0056.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1876
	os_tid = 0x2990

	[0056.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF", dwFileAttributes=0x80) returned 0
	[0056.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1877
	os_tid = 0x2994

	[0056.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF", dwFileAttributes=0x80) returned 0
	[0056.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1878
	os_tid = 0x2998

	[0056.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF", dwFileAttributes=0x80) returned 0
	[0056.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.956] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1879
	os_tid = 0x299c

	[0056.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF", dwFileAttributes=0x80) returned 0
	[0056.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03470_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03470_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1880
	os_tid = 0x29a0

	[0056.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF", dwFileAttributes=0x80) returned 0
	[0056.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.959] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1881
	os_tid = 0x29a4

	[0056.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF", dwFileAttributes=0x80) returned 0
	[0056.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0056.962] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1882
	os_tid = 0x29a8

	[0056.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF", dwFileAttributes=0x80) returned 0
	[0057.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03731_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03731_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.027] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1883
	os_tid = 0x29ac

	[0057.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF", dwFileAttributes=0x80) returned 0
	[0057.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE03795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe03795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.028] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1884
	os_tid = 0x29b0

	[0057.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF", dwFileAttributes=0x80) returned 0
	[0057.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE04050_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe04050_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.029] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1885
	os_tid = 0x29b4

	[0057.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF", dwFileAttributes=0x80) returned 0
	[0057.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05665_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05665_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.030] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1886
	os_tid = 0x29b8

	[0057.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF", dwFileAttributes=0x80) returned 0
	[0057.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05710_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05710_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1887
	os_tid = 0x29bc

	[0057.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF", dwFileAttributes=0x80) returned 0
	[0057.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05869_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05869_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1888
	os_tid = 0x29c0

	[0057.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF", dwFileAttributes=0x80) returned 0
	[0057.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05870_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05870_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.033] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1889
	os_tid = 0x29c4

	[0057.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF", dwFileAttributes=0x80) returned 0
	[0057.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE05930_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe05930_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.034] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1890
	os_tid = 0x29c8

	[0057.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF", dwFileAttributes=0x80) returned 0
	[0057.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06049_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06049_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1891
	os_tid = 0x29cc

	[0057.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF", dwFileAttributes=0x80) returned 0
	[0057.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PE06450_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pe06450_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.037] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1892
	os_tid = 0x29d0

	[0057.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF", dwFileAttributes=0x80) returned 0
	[0057.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00601G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00601g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1893
	os_tid = 0x29d4

	[0057.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP", dwFileAttributes=0x80) returned 0
	[0057.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH00780U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph00780u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.039] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1894
	os_tid = 0x29d8

	[0057.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP", dwFileAttributes=0x80) returned 0
	[0057.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01035U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01035u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.041] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1895
	os_tid = 0x29dc

	[0057.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG", dwFileAttributes=0x80) returned 0
	[0057.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01046J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01046j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.042] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1896
	os_tid = 0x29e0

	[0057.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG", dwFileAttributes=0x80) returned 0
	[0057.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01179J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01179j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.043] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1897
	os_tid = 0x29e4

	[0057.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG", dwFileAttributes=0x80) returned 0
	[0057.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01213K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01213k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.044] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1898
	os_tid = 0x29e8

	[0057.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG", dwFileAttributes=0x80) returned 0
	[0057.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01221K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01221k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.046] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1899
	os_tid = 0x29ec

	[0057.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP", dwFileAttributes=0x80) returned 0
	[0057.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01235U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01235u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.047] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1900
	os_tid = 0x29f0

	[0057.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP", dwFileAttributes=0x80) returned 0
	[0057.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01236U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01236u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.048] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1901
	os_tid = 0x29f4

	[0057.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG", dwFileAttributes=0x80) returned 0
	[0057.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01239K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01239k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.049] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1902
	os_tid = 0x29f8

	[0057.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP", dwFileAttributes=0x80) returned 0
	[0057.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01247U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01247u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.050] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1903
	os_tid = 0x29fc

	[0057.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF", dwFileAttributes=0x80) returned 0
	[0057.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01255G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01255g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.051] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1904
	os_tid = 0x2a00

	[0057.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP", dwFileAttributes=0x80) returned 0
	[0057.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01265U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01265u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1905
	os_tid = 0x2a04

	[0057.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP", dwFileAttributes=0x80) returned 0
	[0057.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01332U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01332u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1906
	os_tid = 0x2a08

	[0057.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP", dwFileAttributes=0x80) returned 0
	[0057.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01478U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01478u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1907
	os_tid = 0x2a0c

	[0057.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP", dwFileAttributes=0x80) returned 0
	[0057.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01562U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01562u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.060] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1908
	os_tid = 0x2a10

	[0057.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP", dwFileAttributes=0x80) returned 0
	[0057.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01607U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01607u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.062] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1909
	os_tid = 0x2a14

	[0057.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG", dwFileAttributes=0x80) returned 0
	[0057.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH01931J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph01931j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.063] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1910
	os_tid = 0x2a18

	[0057.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG", dwFileAttributes=0x80) returned 0
	[0057.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02028K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02028k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1911
	os_tid = 0x2a1c

	[0057.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP", dwFileAttributes=0x80) returned 0
	[0057.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02039U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02039u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.110] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1912
	os_tid = 0x2a20

	[0057.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP", dwFileAttributes=0x80) returned 0
	[0057.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02040U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02040u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.111] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1913
	os_tid = 0x2a24

	[0057.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG", dwFileAttributes=0x80) returned 0
	[0057.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02053J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02053j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1914
	os_tid = 0x2a28

	[0057.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP", dwFileAttributes=0x80) returned 0
	[0057.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02058U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02058u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.113] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1915
	os_tid = 0x2a2c

	[0057.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP", dwFileAttributes=0x80) returned 0
	[0057.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02062U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02062u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1916
	os_tid = 0x2a30

	[0057.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG", dwFileAttributes=0x80) returned 0
	[0057.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02069J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02069j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.124] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1917
	os_tid = 0x2a34

	[0057.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP", dwFileAttributes=0x80) returned 0
	[0057.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02071U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02071u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1918
	os_tid = 0x2a38

	[0057.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP", dwFileAttributes=0x80) returned 0
	[0057.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02074U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02074u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.127] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1919
	os_tid = 0x2a3c

	[0057.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP", dwFileAttributes=0x80) returned 0
	[0057.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02208U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02208u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.128] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1920
	os_tid = 0x2a40

	[0057.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP", dwFileAttributes=0x80) returned 0
	[0057.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02223U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02223u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.129] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1921
	os_tid = 0x2a44

	[0057.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP", dwFileAttributes=0x80) returned 0
	[0057.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02291U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02291u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.131] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1922
	os_tid = 0x2a48

	[0057.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP", dwFileAttributes=0x80) returned 0
	[0057.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02398U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02398u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.132] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1923
	os_tid = 0x2a4c

	[0057.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG", dwFileAttributes=0x80) returned 0
	[0057.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02412K.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02412k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.133] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1924
	os_tid = 0x2a50

	[0057.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP", dwFileAttributes=0x80) returned 0
	[0057.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02417U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02417u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.134] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1925
	os_tid = 0x2a54

	[0057.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP", dwFileAttributes=0x80) returned 0
	[0057.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02466U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02466u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.135] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1926
	os_tid = 0x2a58

	[0057.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP", dwFileAttributes=0x80) returned 0
	[0057.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02470U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02470u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.136] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1927
	os_tid = 0x2a5c

	[0057.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP", dwFileAttributes=0x80) returned 0
	[0057.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02503U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02503u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.138] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1928
	os_tid = 0x2a60

	[0057.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG", dwFileAttributes=0x80) returned 0
	[0057.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02567J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02567j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.139] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1929
	os_tid = 0x2a64

	[0057.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF", dwFileAttributes=0x80) returned 0
	[0057.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.140] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1930
	os_tid = 0x2a68

	[0057.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP", dwFileAttributes=0x80) returned 0
	[0057.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02736U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02736u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.141] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1931
	os_tid = 0x2a6c

	[0057.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP", dwFileAttributes=0x80) returned 0
	[0057.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02738U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02738u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.142] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1932
	os_tid = 0x2a70

	[0057.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF", dwFileAttributes=0x80) returned 0
	[0057.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.143] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1933
	os_tid = 0x2a74

	[0057.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP", dwFileAttributes=0x80) returned 0
	[0057.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02740U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02740u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.144] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1934
	os_tid = 0x2a78

	[0057.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF", dwFileAttributes=0x80) returned 0
	[0057.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.145] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1935
	os_tid = 0x2a7c

	[0057.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP", dwFileAttributes=0x80) returned 0
	[0057.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02742U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02742u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.146] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1936
	os_tid = 0x2a80

	[0057.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF", dwFileAttributes=0x80) returned 0
	[0057.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02743G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02743g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.147] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1937
	os_tid = 0x2a84

	[0057.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF", dwFileAttributes=0x80) returned 0
	[0057.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1938
	os_tid = 0x2a88

	[0057.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP", dwFileAttributes=0x80) returned 0
	[0057.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02746U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02746u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1939
	os_tid = 0x2a8c

	[0057.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF", dwFileAttributes=0x80) returned 0
	[0057.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1940
	os_tid = 0x2a90

	[0057.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP", dwFileAttributes=0x80) returned 0
	[0057.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02748U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02748u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1941
	os_tid = 0x2a94

	[0057.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF", dwFileAttributes=0x80) returned 0
	[0057.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1942
	os_tid = 0x2a98

	[0057.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP", dwFileAttributes=0x80) returned 0
	[0057.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02749U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02749u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1943
	os_tid = 0x2a9c

	[0057.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF", dwFileAttributes=0x80) returned 0
	[0057.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.156] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1944
	os_tid = 0x2aa0

	[0057.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP", dwFileAttributes=0x80) returned 0
	[0057.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02750U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02750u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1945
	os_tid = 0x2aa4

	[0057.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF", dwFileAttributes=0x80) returned 0
	[0057.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1946
	os_tid = 0x2aa8

	[0057.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP", dwFileAttributes=0x80) returned 0
	[0057.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02752U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02752u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.159] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1947
	os_tid = 0x2aac

	[0057.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP", dwFileAttributes=0x80) returned 0
	[0057.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02753U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02753u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1948
	os_tid = 0x2ab0

	[0057.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP", dwFileAttributes=0x80) returned 0
	[0057.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02754U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02754u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1949
	os_tid = 0x2ab4

	[0057.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP", dwFileAttributes=0x80) returned 0
	[0057.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02755U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02755u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1950
	os_tid = 0x2ab8

	[0057.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP", dwFileAttributes=0x80) returned 0
	[0057.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02756U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02756u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1951
	os_tid = 0x2abc

	[0057.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP", dwFileAttributes=0x80) returned 0
	[0057.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02757U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02757u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1952
	os_tid = 0x2ac0

	[0057.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP", dwFileAttributes=0x80) returned 0
	[0057.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02758U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02758u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1953
	os_tid = 0x2ac4

	[0057.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG", dwFileAttributes=0x80) returned 0
	[0057.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02759J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02759j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1954
	os_tid = 0x2ac8

	[0057.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG", dwFileAttributes=0x80) returned 0
	[0057.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02810J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02810j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1955
	os_tid = 0x2acc

	[0057.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG", dwFileAttributes=0x80) returned 0
	[0057.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02829J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02829j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1956
	os_tid = 0x2ad0

	[0057.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF", dwFileAttributes=0x80) returned 0
	[0057.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02845G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02845g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1957
	os_tid = 0x2ad4

	[0057.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG", dwFileAttributes=0x80) returned 0
	[0057.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH02897J.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph02897j.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1958
	os_tid = 0x2ad8

	[0057.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP", dwFileAttributes=0x80) returned 0
	[0057.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03011U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03011u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1959
	os_tid = 0x2adc

	[0057.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP", dwFileAttributes=0x80) returned 0
	[0057.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03012U.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03012u.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1960
	os_tid = 0x2ae0

	[0057.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF", dwFileAttributes=0x80) returned 0
	[0057.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03014_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03014_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1961
	os_tid = 0x2ae4

	[0057.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG", dwFileAttributes=0x80) returned 0
	[0057.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03041I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03041i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1962
	os_tid = 0x2ae8

	[0057.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG", dwFileAttributes=0x80) returned 0
	[0057.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03143I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03143i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1963
	os_tid = 0x2aec

	[0057.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG", dwFileAttributes=0x80) returned 0
	[0057.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03205I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03205i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1964
	os_tid = 0x2af0

	[0057.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG", dwFileAttributes=0x80) returned 0
	[0057.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03224I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03224i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1965
	os_tid = 0x2af4

	[0057.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG", dwFileAttributes=0x80) returned 0
	[0057.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03379I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03379i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1966
	os_tid = 0x2af8

	[0057.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG", dwFileAttributes=0x80) returned 0
	[0057.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03380I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03380i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1967
	os_tid = 0x2afc

	[0057.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG", dwFileAttributes=0x80) returned 0
	[0057.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PH03425I.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ph03425i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1968
	os_tid = 0x2b00

	[0057.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF", dwFileAttributes=0x80) returned 0
	[0057.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrt.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1969
	os_tid = 0x2b04

	[0057.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF", dwFileAttributes=0x80) returned 0
	[0057.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PRRTINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\prrtinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1970
	os_tid = 0x2b08

	[0057.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF", dwFileAttributes=0x80) returned 0
	[0057.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSRETRO.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\psretro.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.196] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1971
	os_tid = 0x2b0c

	[0057.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF", dwFileAttributes=0x80) returned 0
	[0057.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETLG.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketlg.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.197] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1972
	os_tid = 0x2b10

	[0057.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF", dwFileAttributes=0x80) returned 0
	[0057.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSSKETSM.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pssketsm.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.197] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1973
	os_tid = 0x2b14

	[0057.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF", dwFileAttributes=0x80) returned 0
	[0057.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PSWAVY.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\pswavy.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1974
	os_tid = 0x2b18

	[0057.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF", dwFileAttributes=0x80) returned 0
	[0057.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RE00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\re00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.199] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1975
	os_tid = 0x2b1c

	[0057.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF", dwFileAttributes=0x80) returned 0
	[0057.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\RECYCLE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\recycle.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.200] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1976
	os_tid = 0x2b20

	[0057.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID", dwFileAttributes=0x80) returned 0
	[0057.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1977
	os_tid = 0x2b24

	[0057.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID", dwFileAttributes=0x80) returned 0
	[0057.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1978
	os_tid = 0x2b28

	[0057.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID", dwFileAttributes=0x80) returned 0
	[0057.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.204] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1979
	os_tid = 0x2b2c

	[0057.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID", dwFileAttributes=0x80) returned 0
	[0057.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.205] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1980
	os_tid = 0x2b30

	[0057.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF", dwFileAttributes=0x80) returned 0
	[0057.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.206] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1981
	os_tid = 0x2b34

	[0057.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF", dwFileAttributes=0x80) returned 0
	[0057.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1982
	os_tid = 0x2b38

	[0057.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF", dwFileAttributes=0x80) returned 0
	[0057.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00268_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.208] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1983
	os_tid = 0x2b3c

	[0057.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF", dwFileAttributes=0x80) returned 0
	[0057.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00286_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00286_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.209] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1984
	os_tid = 0x2b40

	[0057.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF", dwFileAttributes=0x80) returned 0
	[0057.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1985
	os_tid = 0x2b44

	[0057.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF", dwFileAttributes=0x80) returned 0
	[0057.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00308_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.211] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1986
	os_tid = 0x2b48

	[0057.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF", dwFileAttributes=0x80) returned 0
	[0057.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00345_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.212] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1987
	os_tid = 0x2b4c

	[0057.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF", dwFileAttributes=0x80) returned 0
	[0057.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1988
	os_tid = 0x2b50

	[0057.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF", dwFileAttributes=0x80) returned 0
	[0057.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL00712_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl00712_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1989
	os_tid = 0x2b54

	[0057.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF", dwFileAttributes=0x80) returned 0
	[0057.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01040_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01040_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.215] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1990
	os_tid = 0x2b58

	[0057.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF", dwFileAttributes=0x80) returned 0
	[0057.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01041_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01041_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.217] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1991
	os_tid = 0x2b5c

	[0057.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF", dwFileAttributes=0x80) returned 0
	[0057.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01394_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01394_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1992
	os_tid = 0x2b60

	[0057.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF", dwFileAttributes=0x80) returned 0
	[0057.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01395_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01395_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1993
	os_tid = 0x2b64

	[0057.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF", dwFileAttributes=0x80) returned 0
	[0057.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SL01565_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sl01565_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.221] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1994
	os_tid = 0x2b68

	[0057.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF", dwFileAttributes=0x80) returned 0
	[0057.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00017_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00017_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.222] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1995
	os_tid = 0x2b6c

	[0057.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF", dwFileAttributes=0x80) returned 0
	[0057.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00018_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.223] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1996
	os_tid = 0x2b70

	[0057.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF", dwFileAttributes=0x80) returned 0
	[0057.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.225] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1997
	os_tid = 0x2b74

	[0057.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF", dwFileAttributes=0x80) returned 0
	[0057.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.226] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1998
	os_tid = 0x2b78

	[0057.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF", dwFileAttributes=0x80) returned 0
	[0057.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00159_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00159_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.228] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 1999
	os_tid = 0x2b7c

	[0057.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF", dwFileAttributes=0x80) returned 0
	[0057.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.230] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2000
	os_tid = 0x2b80

	[0057.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF", dwFileAttributes=0x80) returned 0
	[0057.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.231] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2001
	os_tid = 0x2b84

	[0057.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF", dwFileAttributes=0x80) returned 0
	[0057.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.232] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2002
	os_tid = 0x2b88

	[0057.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF", dwFileAttributes=0x80) returned 0
	[0057.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.233] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2003
	os_tid = 0x2b8c

	[0057.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF", dwFileAttributes=0x80) returned 0
	[0057.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.235] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2004
	os_tid = 0x2b90

	[0057.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF", dwFileAttributes=0x80) returned 0
	[0057.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00190_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00190_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.236] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2005
	os_tid = 0x2b94

	[0057.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF", dwFileAttributes=0x80) returned 0
	[0057.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.237] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2006
	os_tid = 0x2b98

	[0057.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF", dwFileAttributes=0x80) returned 0
	[0057.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00192_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00192_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2007
	os_tid = 0x2b9c

	[0057.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF", dwFileAttributes=0x80) returned 0
	[0057.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.240] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2008
	os_tid = 0x2ba0

	[0057.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF", dwFileAttributes=0x80) returned 0
	[0057.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00197_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00197_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.241] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2009
	os_tid = 0x2ba4

	[0057.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF", dwFileAttributes=0x80) returned 0
	[0057.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00199_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00199_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.243] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2010
	os_tid = 0x2ba8

	[0057.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF", dwFileAttributes=0x80) returned 0
	[0057.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.243] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2011
	os_tid = 0x2bac

	[0057.244] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF", dwFileAttributes=0x80) returned 0
	[0057.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00208_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00208_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.244] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2012
	os_tid = 0x2bb0

	[0057.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF", dwFileAttributes=0x80) returned 0
	[0057.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00212_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00212_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.308] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2013
	os_tid = 0x2bb4

	[0057.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF", dwFileAttributes=0x80) returned 0
	[0057.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00221_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00221_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2014
	os_tid = 0x2bb8

	[0057.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF", dwFileAttributes=0x80) returned 0
	[0057.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.310] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2015
	os_tid = 0x2bbc

	[0057.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF", dwFileAttributes=0x80) returned 0
	[0057.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00223_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00223_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.311] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2016
	os_tid = 0x2bc0

	[0057.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF", dwFileAttributes=0x80) returned 0
	[0057.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00257_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00257_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.315] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2017
	os_tid = 0x2bc4

	[0057.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF", dwFileAttributes=0x80) returned 0
	[0057.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00289_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00289_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2018
	os_tid = 0x2bc8

	[0057.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF", dwFileAttributes=0x80) returned 0
	[0057.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00299_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00299_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2019
	os_tid = 0x2bcc

	[0057.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF", dwFileAttributes=0x80) returned 0
	[0057.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00305_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00305_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2020
	os_tid = 0x2bd0

	[0057.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF", dwFileAttributes=0x80) returned 0
	[0057.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00333_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00333_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2021
	os_tid = 0x2bd4

	[0057.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF", dwFileAttributes=0x80) returned 0
	[0057.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00345_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00345_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2022
	os_tid = 0x2bd8

	[0057.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF", dwFileAttributes=0x80) returned 0
	[0057.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00350_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00350_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2023
	os_tid = 0x2bdc

	[0057.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF", dwFileAttributes=0x80) returned 0
	[0057.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00352_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00352_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2024
	os_tid = 0x2be0

	[0057.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF", dwFileAttributes=0x80) returned 0
	[0057.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00364_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00364_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2025
	os_tid = 0x2be4

	[0057.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF", dwFileAttributes=0x80) returned 0
	[0057.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00367_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00367_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2026
	os_tid = 0x2be8

	[0057.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF", dwFileAttributes=0x80) returned 0
	[0057.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00373_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00373_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2027
	os_tid = 0x2bec

	[0057.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF", dwFileAttributes=0x80) returned 0
	[0057.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2028
	os_tid = 0x2bf0

	[0057.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF", dwFileAttributes=0x80) returned 0
	[0057.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2029
	os_tid = 0x2bf4

	[0057.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF", dwFileAttributes=0x80) returned 0
	[0057.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00391_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00391_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2030
	os_tid = 0x2bf8

	[0057.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF", dwFileAttributes=0x80) returned 0
	[0057.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00416_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00416_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.331] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2031
	os_tid = 0x2bfc

	[0057.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF", dwFileAttributes=0x80) returned 0
	[0057.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00423_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00423_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2032
	os_tid = 0xb10

	[0057.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF", dwFileAttributes=0x80) returned 0
	[0057.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2033
	os_tid = 0x2c04

	[0057.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF", dwFileAttributes=0x80) returned 0
	[0057.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00452_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00452_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.336] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2034
	os_tid = 0x2c08

	[0057.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF", dwFileAttributes=0x80) returned 0
	[0057.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2035
	os_tid = 0x2c0c

	[0057.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF", dwFileAttributes=0x80) returned 0
	[0057.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00454_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00454_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2036
	os_tid = 0x2c10

	[0057.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF", dwFileAttributes=0x80) returned 0
	[0057.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00466_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00466_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2037
	os_tid = 0x2c14

	[0057.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF", dwFileAttributes=0x80) returned 0
	[0057.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00476_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00476_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2038
	os_tid = 0x2c18

	[0057.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF", dwFileAttributes=0x80) returned 0
	[0057.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00479_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00479_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2039
	os_tid = 0x2c1c

	[0057.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF", dwFileAttributes=0x80) returned 0
	[0057.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00483_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00483_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2040
	os_tid = 0x2c20

	[0057.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF", dwFileAttributes=0x80) returned 0
	[0057.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00486_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00486_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2041
	os_tid = 0x2c24

	[0057.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF", dwFileAttributes=0x80) returned 0
	[0057.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00505_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00505_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.349] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2042
	os_tid = 0x2c28

	[0057.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF", dwFileAttributes=0x80) returned 0
	[0057.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.351] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2043
	os_tid = 0x2c2c

	[0057.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF", dwFileAttributes=0x80) returned 0
	[0057.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00555_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00555_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2044
	os_tid = 0x2c30

	[0057.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF", dwFileAttributes=0x80) returned 0
	[0057.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.353] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2045
	os_tid = 0x2c34

	[0057.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF", dwFileAttributes=0x80) returned 0
	[0057.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00610_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00610_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2046
	os_tid = 0x2c38

	[0057.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF", dwFileAttributes=0x80) returned 0
	[0057.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2047
	os_tid = 0x2c3c

	[0057.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF", dwFileAttributes=0x80) returned 0
	[0057.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00633_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00633_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2048
	os_tid = 0x2c40

	[0057.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF", dwFileAttributes=0x80) returned 0
	[0057.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.360] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2049
	os_tid = 0x2c44

	[0057.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF", dwFileAttributes=0x80) returned 0
	[0057.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00656_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00656_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2050
	os_tid = 0x2c48

	[0057.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF", dwFileAttributes=0x80) returned 0
	[0057.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00668_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00668_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.363] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2051
	os_tid = 0x2c4c

	[0057.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF", dwFileAttributes=0x80) returned 0
	[0057.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00670_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00670_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2052
	os_tid = 0x2c50

	[0057.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF", dwFileAttributes=0x80) returned 0
	[0057.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00671_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00671_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2053
	os_tid = 0x2c54

	[0057.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF", dwFileAttributes=0x80) returned 0
	[0057.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00683_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00683_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.366] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2054
	os_tid = 0x2c58

	[0057.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF", dwFileAttributes=0x80) returned 0
	[0057.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00694_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00694_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2055
	os_tid = 0x2c5c

	[0057.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF", dwFileAttributes=0x80) returned 0
	[0057.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00704_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00704_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.368] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2056
	os_tid = 0x2c60

	[0057.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF", dwFileAttributes=0x80) returned 0
	[0057.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00726_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00726_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2057
	os_tid = 0x2c64

	[0057.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF", dwFileAttributes=0x80) returned 0
	[0057.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00728_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00728_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2058
	os_tid = 0x2c68

	[0057.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF", dwFileAttributes=0x80) returned 0
	[0057.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00732_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00732_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2059
	os_tid = 0x2c6c

	[0057.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF", dwFileAttributes=0x80) returned 0
	[0057.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00734_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00734_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2060
	os_tid = 0x2c70

	[0057.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF", dwFileAttributes=0x80) returned 0
	[0057.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00735_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00735_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.375] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2061
	os_tid = 0x2c74

	[0057.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF", dwFileAttributes=0x80) returned 0
	[0057.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00736_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00736_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.376] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2062
	os_tid = 0x2c78

	[0057.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF", dwFileAttributes=0x80) returned 0
	[0057.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00768_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00768_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.380] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2063
	os_tid = 0x2c7c

	[0057.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF", dwFileAttributes=0x80) returned 0
	[0057.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00783_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00783_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.381] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2064
	os_tid = 0x2c80

	[0057.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF", dwFileAttributes=0x80) returned 0
	[0057.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00820_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00820_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2065
	os_tid = 0x2c84

	[0057.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF", dwFileAttributes=0x80) returned 0
	[0057.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.383] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2066
	os_tid = 0x2c88

	[0057.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF", dwFileAttributes=0x80) returned 0
	[0057.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00834_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00834_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.385] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2067
	os_tid = 0x2c8c

	[0057.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF", dwFileAttributes=0x80) returned 0
	[0057.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00837_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00837_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2068
	os_tid = 0x2c90

	[0057.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF", dwFileAttributes=0x80) returned 0
	[0057.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00910_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00910_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.388] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2069
	os_tid = 0x2c94

	[0057.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF", dwFileAttributes=0x80) returned 0
	[0057.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00911_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00911_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2070
	os_tid = 0x2c98

	[0057.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF", dwFileAttributes=0x80) returned 0
	[0057.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00913_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00913_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2071
	os_tid = 0x2c9c

	[0057.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF", dwFileAttributes=0x80) returned 0
	[0057.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2072
	os_tid = 0x2ca0

	[0057.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF", dwFileAttributes=0x80) returned 0
	[0057.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.394] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2073
	os_tid = 0x2ca4

	[0057.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF", dwFileAttributes=0x80) returned 0
	[0057.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00916_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00916_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.396] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2074
	os_tid = 0x2ca8

	[0057.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF", dwFileAttributes=0x80) returned 0
	[0057.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00917_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00917_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.397] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2075
	os_tid = 0x2cac

	[0057.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF", dwFileAttributes=0x80) returned 0
	[0057.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00918_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00918_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2076
	os_tid = 0x2cb0

	[0057.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF", dwFileAttributes=0x80) returned 0
	[0057.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00935_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00935_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2077
	os_tid = 0x2cb4

	[0057.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF", dwFileAttributes=0x80) returned 0
	[0057.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00938_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00938_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.401] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2078
	os_tid = 0x2cb8

	[0057.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF", dwFileAttributes=0x80) returned 0
	[0057.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00941_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00941_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2079
	os_tid = 0x2cbc

	[0057.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF", dwFileAttributes=0x80) returned 0
	[0057.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00942_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00942_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2080
	os_tid = 0x2cc0

	[0057.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF", dwFileAttributes=0x80) returned 0
	[0057.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO00943_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so00943_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2081
	os_tid = 0x2cc4

	[0057.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF", dwFileAttributes=0x80) returned 0
	[0057.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2082
	os_tid = 0x2cc8

	[0057.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF", dwFileAttributes=0x80) returned 0
	[0057.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01063_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01063_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2083
	os_tid = 0x2ccc

	[0057.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF", dwFileAttributes=0x80) returned 0
	[0057.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2084
	os_tid = 0x2cd0

	[0057.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF", dwFileAttributes=0x80) returned 0
	[0057.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01560_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01560_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2085
	os_tid = 0x2cd4

	[0057.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF", dwFileAttributes=0x80) returned 0
	[0057.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01561_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01561_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2086
	os_tid = 0x2cd8

	[0057.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF", dwFileAttributes=0x80) returned 0
	[0057.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2087
	os_tid = 0x2cdc

	[0057.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF", dwFileAttributes=0x80) returned 0
	[0057.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01566_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01566_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2088
	os_tid = 0x2ce0

	[0057.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF", dwFileAttributes=0x80) returned 0
	[0057.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01568_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01568_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2089
	os_tid = 0x2ce4

	[0057.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF", dwFileAttributes=0x80) returned 0
	[0057.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01569_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01569_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.417] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2090
	os_tid = 0x2ce8

	[0057.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF", dwFileAttributes=0x80) returned 0
	[0057.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01575_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01575_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2091
	os_tid = 0x2cec

	[0057.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF", dwFileAttributes=0x80) returned 0
	[0057.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01777_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01777_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.422] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2092
	os_tid = 0x2cf0

	[0057.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF", dwFileAttributes=0x80) returned 0
	[0057.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01785_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01785_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2093
	os_tid = 0x2cf4

	[0057.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF", dwFileAttributes=0x80) returned 0
	[0057.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01805_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01805_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2094
	os_tid = 0x2cf8

	[0057.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF", dwFileAttributes=0x80) returned 0
	[0057.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01905_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01905_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2095
	os_tid = 0x2cfc

	[0057.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF", dwFileAttributes=0x80) returned 0
	[0057.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO01954_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so01954_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2096
	os_tid = 0x2d00

	[0057.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF", dwFileAttributes=0x80) returned 0
	[0057.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02009_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02009_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2097
	os_tid = 0x2d04

	[0057.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF", dwFileAttributes=0x80) returned 0
	[0057.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02022_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02022_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2098
	os_tid = 0x2d08

	[0057.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF", dwFileAttributes=0x80) returned 0
	[0057.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02024_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02024_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.436] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2099
	os_tid = 0x2d0c

	[0057.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF", dwFileAttributes=0x80) returned 0
	[0057.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02025_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02025_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2100
	os_tid = 0x2d10

	[0057.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF", dwFileAttributes=0x80) returned 0
	[0057.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02028_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02028_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.440] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2101
	os_tid = 0x2d14

	[0057.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF", dwFileAttributes=0x80) returned 0
	[0057.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.441] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2102
	os_tid = 0x2d18

	[0057.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF", dwFileAttributes=0x80) returned 0
	[0057.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02048_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02048_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2103
	os_tid = 0x2d1c

	[0057.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF", dwFileAttributes=0x80) returned 0
	[0057.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02051_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02051_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.444] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2104
	os_tid = 0x2d20

	[0057.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF", dwFileAttributes=0x80) returned 0
	[0057.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02054_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02054_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.448] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2105
	os_tid = 0x2d24

	[0057.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF", dwFileAttributes=0x80) returned 0
	[0057.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02055_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02055_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.449] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2106
	os_tid = 0x2d28

	[0057.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF", dwFileAttributes=0x80) returned 0
	[0057.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02067_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02067_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.452] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2107
	os_tid = 0x2d2c

	[0057.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF", dwFileAttributes=0x80) returned 0
	[0057.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02094_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02094_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.453] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2108
	os_tid = 0x2d30

	[0057.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF", dwFileAttributes=0x80) returned 0
	[0057.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02227_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02227_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.455] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2109
	os_tid = 0x2d34

	[0057.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF", dwFileAttributes=0x80) returned 0
	[0057.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02228_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02228_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.456] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2110
	os_tid = 0x2d38

	[0057.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF", dwFileAttributes=0x80) returned 0
	[0057.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2111
	os_tid = 0x2d3c

	[0057.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF", dwFileAttributes=0x80) returned 0
	[0057.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.460] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2112
	os_tid = 0x2d40

	[0057.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF", dwFileAttributes=0x80) returned 0
	[0057.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02253_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.462] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2113
	os_tid = 0x2d44

	[0057.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF", dwFileAttributes=0x80) returned 0
	[0057.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.464] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2114
	os_tid = 0x2d48

	[0057.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF", dwFileAttributes=0x80) returned 0
	[0057.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02263_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02263_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.465] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2115
	os_tid = 0x2d4c

	[0057.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF", dwFileAttributes=0x80) returned 0
	[0057.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2116
	os_tid = 0x2d50

	[0057.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF", dwFileAttributes=0x80) returned 0
	[0057.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02268_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02268_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.469] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2117
	os_tid = 0x2d54

	[0057.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF", dwFileAttributes=0x80) returned 0
	[0057.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2118
	os_tid = 0x2d58

	[0057.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF", dwFileAttributes=0x80) returned 0
	[0057.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.472] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2119
	os_tid = 0x2d5c

	[0057.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF", dwFileAttributes=0x80) returned 0
	[0057.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.473] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2120
	os_tid = 0x2d60

	[0057.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF", dwFileAttributes=0x80) returned 0
	[0057.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.475] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2121
	os_tid = 0x2d64

	[0057.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF", dwFileAttributes=0x80) returned 0
	[0057.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02431_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02431_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.476] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2122
	os_tid = 0x2d68

	[0057.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF", dwFileAttributes=0x80) returned 0
	[0057.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2123
	os_tid = 0x2d6c

	[0057.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF", dwFileAttributes=0x80) returned 0
	[0057.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.479] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2124
	os_tid = 0x2d70

	[0057.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF", dwFileAttributes=0x80) returned 0
	[0057.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02464_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02464_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.480] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2125
	os_tid = 0x2d74

	[0057.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF", dwFileAttributes=0x80) returned 0
	[0057.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02465_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02465_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.481] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2126
	os_tid = 0x2d78

	[0057.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF", dwFileAttributes=0x80) returned 0
	[0057.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02578_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02578_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2127
	os_tid = 0x2d7c

	[0057.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF", dwFileAttributes=0x80) returned 0
	[0057.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02617_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02617_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2128
	os_tid = 0x2d80

	[0057.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF", dwFileAttributes=0x80) returned 0
	[0057.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.484] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2129
	os_tid = 0x2d84

	[0057.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF", dwFileAttributes=0x80) returned 0
	[0057.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02791_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02791_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2130
	os_tid = 0x2d88

	[0057.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02793_.WMF", dwFileAttributes=0x80) returned 0
	[0057.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2131
	os_tid = 0x2d8c

	[0057.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02794_.WMF", dwFileAttributes=0x80) returned 0
	[0057.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02794_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02794_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2132
	os_tid = 0x2d90

	[0057.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02862_.WMF", dwFileAttributes=0x80) returned 0
	[0057.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02862_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02862_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2133
	os_tid = 0x2d94

	[0057.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02886_.WMF", dwFileAttributes=0x80) returned 0
	[0057.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02886_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02886_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2134
	os_tid = 0x2d98

	[0057.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02958_.WMF", dwFileAttributes=0x80) returned 0
	[0057.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SO02958_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\so02958_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2135
	os_tid = 0x2d9c

	[0057.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID", dwFileAttributes=0x80) returned 0
	[0057.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2136
	os_tid = 0x2da0

	[0057.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID", dwFileAttributes=0x80) returned 0
	[0057.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2137
	os_tid = 0x2da4

	[0057.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\STUBBY1.WMF", dwFileAttributes=0x80) returned 0
	[0057.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\STUBBY1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\stubby1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.497] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2138
	os_tid = 0x2da8

	[0057.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\STUBBY2.WMF", dwFileAttributes=0x80) returned 0
	[0057.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\STUBBY2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\stubby2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2139
	os_tid = 0x2dac

	[0057.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID", dwFileAttributes=0x80) returned 0
	[0057.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.499] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2140
	os_tid = 0x2db0

	[0057.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID", dwFileAttributes=0x80) returned 0
	[0057.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2141
	os_tid = 0x2db4

	[0057.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00110_.WMF", dwFileAttributes=0x80) returned 0
	[0057.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00110_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00110_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2142
	os_tid = 0x2db8

	[0057.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00127_.WMF", dwFileAttributes=0x80) returned 0
	[0057.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00127_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00127_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2143
	os_tid = 0x2dbc

	[0057.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00132_.WMF", dwFileAttributes=0x80) returned 0
	[0057.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00132_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00132_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.504] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2144
	os_tid = 0x2dc0

	[0057.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00170_.WMF", dwFileAttributes=0x80) returned 0
	[0057.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.505] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2145
	os_tid = 0x2dc4

	[0057.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00560_.WMF", dwFileAttributes=0x80) returned 0
	[0057.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00560_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00560_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2146
	os_tid = 0x2dc8

	[0057.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00642_.WMF", dwFileAttributes=0x80) returned 0
	[0057.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00642_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00642_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.508] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2147
	os_tid = 0x2dcc

	[0057.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00788_.WMF", dwFileAttributes=0x80) returned 0
	[0057.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00788_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00788_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.513] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2148
	os_tid = 0x2dd0

	[0057.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00792_.WMF", dwFileAttributes=0x80) returned 0
	[0057.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00792_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00792_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.598] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2149
	os_tid = 0x2dd4

	[0057.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00795_.WMF", dwFileAttributes=0x80) returned 0
	[0057.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00795_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00795_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.603] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2150
	os_tid = 0x2dd8

	[0057.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00882_.WMF", dwFileAttributes=0x80) returned 0
	[0057.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY00882_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy00882_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.610] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2151
	os_tid = 0x2ddc

	[0057.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01006_.WMF", dwFileAttributes=0x80) returned 0
	[0057.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.615] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2152
	os_tid = 0x2de0

	[0057.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01252_.WMF", dwFileAttributes=0x80) returned 0
	[0057.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.622] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2153
	os_tid = 0x2de4

	[0057.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01253_.WMF", dwFileAttributes=0x80) returned 0
	[0057.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01253_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.628] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2154
	os_tid = 0x2de8

	[0057.629] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01462_.WMF", dwFileAttributes=0x80) returned 0
	[0057.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01462_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01462_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.633] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2155
	os_tid = 0x2dec

	[0057.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01491_.WMF", dwFileAttributes=0x80) returned 0
	[0057.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01491_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01491_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.638] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2156
	os_tid = 0x2df0

	[0057.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01563_.WMF", dwFileAttributes=0x80) returned 0
	[0057.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01563_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01563_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2157
	os_tid = 0x2df4

	[0057.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01572_.WMF", dwFileAttributes=0x80) returned 0
	[0057.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01572_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01572_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.652] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2158
	os_tid = 0x2df8

	[0057.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01590_.WMF", dwFileAttributes=0x80) returned 0
	[0057.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SY01590_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sy01590_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.656] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2159
	os_tid = 0x2dfc

	[0057.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TAIL.WMF", dwFileAttributes=0x80) returned 0
	[0057.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TAIL.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tail.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2160
	os_tid = 0x2e00

	[0057.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00011_.WMF", dwFileAttributes=0x80) returned 0
	[0057.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00011_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00011_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.665] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2161
	os_tid = 0x2e04

	[0057.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00014_.WMF", dwFileAttributes=0x80) returned 0
	[0057.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00014_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00014_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.670] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2162
	os_tid = 0x2e08

	[0057.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00018_.WMF", dwFileAttributes=0x80) returned 0
	[0057.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00018_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00018_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.674] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2163
	os_tid = 0x2e0c

	[0057.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00095_.WMF", dwFileAttributes=0x80) returned 0
	[0057.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00095_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00095_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.679] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2164
	os_tid = 0x2e10

	[0057.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00211_.WMF", dwFileAttributes=0x80) returned 0
	[0057.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00211_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00211_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2165
	os_tid = 0x2e14

	[0057.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00217_.WMF", dwFileAttributes=0x80) returned 0
	[0057.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00217_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00217_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2166
	os_tid = 0x2e18

	[0057.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00218_.WMF", dwFileAttributes=0x80) returned 0
	[0057.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2167
	os_tid = 0x2e1c

	[0057.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00231_.WMF", dwFileAttributes=0x80) returned 0
	[0057.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2168
	os_tid = 0x2e20

	[0057.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00234_.WMF", dwFileAttributes=0x80) returned 0
	[0057.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2169
	os_tid = 0x2e24

	[0057.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00241_.WMF", dwFileAttributes=0x80) returned 0
	[0057.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.709] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2170
	os_tid = 0x2e28

	[0057.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00246_.WMF", dwFileAttributes=0x80) returned 0
	[0057.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00246_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00246_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.714] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2171
	os_tid = 0x2e2c

	[0057.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00253_.WMF", dwFileAttributes=0x80) returned 0
	[0057.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00253_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00253_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2172
	os_tid = 0x2e30

	[0057.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00255_.WMF", dwFileAttributes=0x80) returned 0
	[0057.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2173
	os_tid = 0x2e34

	[0057.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00330_.WMF", dwFileAttributes=0x80) returned 0
	[0057.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00330_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00330_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.727] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2174
	os_tid = 0x2e38

	[0057.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00411_.WMF", dwFileAttributes=0x80) returned 0
	[0057.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00411_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00411_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2175
	os_tid = 0x2e3c

	[0057.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00687_.WMF", dwFileAttributes=0x80) returned 0
	[0057.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2176
	os_tid = 0x2e40

	[0057.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN01164_.WMF", dwFileAttributes=0x80) returned 0
	[0057.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN01164_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn01164_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2177
	os_tid = 0x2e44

	[0057.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN01165_.WMF", dwFileAttributes=0x80) returned 0
	[0057.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN01165_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn01165_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2178
	os_tid = 0x2e48

	[0057.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN01308_.WMF", dwFileAttributes=0x80) returned 0
	[0057.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TN01308_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tn01308_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2179
	os_tid = 0x2e4c

	[0057.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00006_.WMF", dwFileAttributes=0x80) returned 0
	[0057.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.756] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2180
	os_tid = 0x2e50

	[0057.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00095_.WMF", dwFileAttributes=0x80) returned 0
	[0057.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00095_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00095_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.760] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2181
	os_tid = 0x2e54

	[0057.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00097_.WMF", dwFileAttributes=0x80) returned 0
	[0057.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.764] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2182
	os_tid = 0x2e58

	[0057.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00116_.WMF", dwFileAttributes=0x80) returned 0
	[0057.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2183
	os_tid = 0x2e5c

	[0057.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00126_.WMF", dwFileAttributes=0x80) returned 0
	[0057.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00126_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00126_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2184
	os_tid = 0x2e60

	[0057.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00172_.WMF", dwFileAttributes=0x80) returned 0
	[0057.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.779] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2185
	os_tid = 0x2e64

	[0057.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00178_.WMF", dwFileAttributes=0x80) returned 0
	[0057.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2186
	os_tid = 0x2e68

	[0057.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00232_.WMF", dwFileAttributes=0x80) returned 0
	[0057.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00232_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00232_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.787] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2187
	os_tid = 0x2e6c

	[0057.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00233_.WMF", dwFileAttributes=0x80) returned 0
	[0057.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.792] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2188
	os_tid = 0x2e70

	[0057.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00402_.WMF", dwFileAttributes=0x80) returned 0
	[0057.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00402_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00402_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2189
	os_tid = 0x2e74

	[0057.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00482_.WMF", dwFileAttributes=0x80) returned 0
	[0057.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00482_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00482_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2190
	os_tid = 0x2e78

	[0057.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00494_.WMF", dwFileAttributes=0x80) returned 0
	[0057.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\TR00494_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\tr00494_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2191
	os_tid = 0x2e7c

	[0057.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID", dwFileAttributes=0x80) returned 0
	[0057.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2192
	os_tid = 0x2e80

	[0057.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID", dwFileAttributes=0x80) returned 0
	[0057.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2193
	os_tid = 0x2e84

	[0057.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.GIF", dwFileAttributes=0x80) returned 0
	[0057.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01219_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01219_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2194
	os_tid = 0x2e88

	[0057.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.GIF", dwFileAttributes=0x80) returned 0
	[0057.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01237_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01237_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2195
	os_tid = 0x2e8c

	[0057.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.GIF", dwFileAttributes=0x80) returned 0
	[0057.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01238_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01238_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2196
	os_tid = 0x2e90

	[0057.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.GIF", dwFileAttributes=0x80) returned 0
	[0057.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01239_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01239_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2197
	os_tid = 0x2e94

	[0057.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.GIF", dwFileAttributes=0x80) returned 0
	[0057.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01240_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01240_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2198
	os_tid = 0x2e98

	[0057.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.GIF", dwFileAttributes=0x80) returned 0
	[0057.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01241_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01241_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2199
	os_tid = 0x2e9c

	[0057.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.GIF", dwFileAttributes=0x80) returned 0
	[0057.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01242_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01242_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.845] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2200
	os_tid = 0x2ea0

	[0057.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.GIF", dwFileAttributes=0x80) returned 0
	[0057.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01243_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01243_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.849] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2201
	os_tid = 0x2ea4

	[0057.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.GIF", dwFileAttributes=0x80) returned 0
	[0057.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01244_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01244_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.853] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2202
	os_tid = 0x2ea8

	[0057.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.GIF", dwFileAttributes=0x80) returned 0
	[0057.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01245_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01245_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2203
	os_tid = 0x2eac

	[0057.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.GIF", dwFileAttributes=0x80) returned 0
	[0057.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01246_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01246_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.862] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2204
	os_tid = 0x2eb0

	[0057.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.GIF", dwFileAttributes=0x80) returned 0
	[0057.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01253_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01253_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.867] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2205
	os_tid = 0x2eb4

	[0057.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.GIF", dwFileAttributes=0x80) returned 0
	[0057.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01268_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01268_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.872] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2206
	os_tid = 0x2eb8

	[0057.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.GIF", dwFileAttributes=0x80) returned 0
	[0057.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01292_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01292_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2207
	os_tid = 0x2ebc

	[0057.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.GIF", dwFileAttributes=0x80) returned 0
	[0057.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01293_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01293_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2208
	os_tid = 0x2ec0

	[0057.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.GIF", dwFileAttributes=0x80) returned 0
	[0057.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01294_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01294_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2209
	os_tid = 0x2ec4

	[0057.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.GIF", dwFileAttributes=0x80) returned 0
	[0057.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01295_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01295_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2210
	os_tid = 0x2ec8

	[0057.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.GIF", dwFileAttributes=0x80) returned 0
	[0057.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01296_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01296_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2211
	os_tid = 0x2ecc

	[0057.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.GIF", dwFileAttributes=0x80) returned 0
	[0057.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01297_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01297_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.901] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2212
	os_tid = 0x2ed0

	[0057.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.GIF", dwFileAttributes=0x80) returned 0
	[0057.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01298_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01298_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.907] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2213
	os_tid = 0x2ed4

	[0057.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.GIF", dwFileAttributes=0x80) returned 0
	[0057.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01299_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01299_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.912] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2214
	os_tid = 0x2ed8

	[0057.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.GIF", dwFileAttributes=0x80) returned 0
	[0057.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01300_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01300_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.918] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2215
	os_tid = 0x2edc

	[0057.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.GIF", dwFileAttributes=0x80) returned 0
	[0057.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01301_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01301_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.923] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2216
	os_tid = 0x2ee0

	[0057.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.GIF", dwFileAttributes=0x80) returned 0
	[0057.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01304G.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01304g.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2217
	os_tid = 0x2ee4

	[0057.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.GIF", dwFileAttributes=0x80) returned 0
	[0057.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01330_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01330_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.935] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2218
	os_tid = 0x2ee8

	[0057.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.GIF", dwFileAttributes=0x80) returned 0
	[0057.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01734_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01734_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.941] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2219
	os_tid = 0x2eec

	[0057.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.GIF", dwFileAttributes=0x80) returned 0
	[0057.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01740_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01740_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2220
	os_tid = 0x2ef0

	[0057.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.GIF", dwFileAttributes=0x80) returned 0
	[0057.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01742_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01742_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2221
	os_tid = 0x2ef4

	[0057.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.GIF", dwFileAttributes=0x80) returned 0
	[0057.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01743_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01743_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2222
	os_tid = 0x2ef8

	[0057.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.GIF", dwFileAttributes=0x80) returned 0
	[0057.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01744_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01744_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.959] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2223
	os_tid = 0x2efc

	[0057.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.GIF", dwFileAttributes=0x80) returned 0
	[0057.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01745_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01745_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.964] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2224
	os_tid = 0x2f00

	[0057.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.GIF", dwFileAttributes=0x80) returned 0
	[0057.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01746_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01746_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.968] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2225
	os_tid = 0x2f04

	[0057.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.GIF", dwFileAttributes=0x80) returned 0
	[0057.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01747_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01747_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2226
	os_tid = 0x2f08

	[0057.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.GIF", dwFileAttributes=0x80) returned 0
	[0057.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01748_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01748_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2227
	os_tid = 0x2f0c

	[0057.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.GIF", dwFileAttributes=0x80) returned 0
	[0057.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01749_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01749_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2228
	os_tid = 0x2f10

	[0057.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.GIF", dwFileAttributes=0x80) returned 0
	[0057.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01750_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01750_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2229
	os_tid = 0x2f14

	[0057.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.GIF", dwFileAttributes=0x80) returned 0
	[0057.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01751_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01751_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.989] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2230
	os_tid = 0x2f18

	[0057.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.GIF", dwFileAttributes=0x80) returned 0
	[0057.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01770_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01770_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0057.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2231
	os_tid = 0x2f1c

	[0057.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.GIF", dwFileAttributes=0x80) returned 0
	[0058.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01838_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01838_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.095] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2235
	os_tid = 0x2f20

	[0058.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.GIF", dwFileAttributes=0x80) returned 0
	[0058.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01839_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01839_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.100] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2236
	os_tid = 0x2f24

	[0058.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.GIF", dwFileAttributes=0x80) returned 0
	[0058.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01840_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01840_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2237
	os_tid = 0x2f28

	[0058.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.GIF", dwFileAttributes=0x80) returned 0
	[0058.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01842_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01842_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2238
	os_tid = 0x2f2c

	[0058.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.GIF", dwFileAttributes=0x80) returned 0
	[0058.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB01843_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb01843_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.113] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2239
	os_tid = 0x2f30

	[0058.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.GIF", dwFileAttributes=0x80) returned 0
	[0058.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WB02229_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wb02229_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.118] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2240
	os_tid = 0x2f34

	[0058.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WHIRL1.WMF", dwFileAttributes=0x80) returned 0
	[0058.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WHIRL1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\whirl1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2241
	os_tid = 0x2f38

	[0058.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WHIRL2.WMF", dwFileAttributes=0x80) returned 0
	[0058.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WHIRL2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\whirl2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.126] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2242
	os_tid = 0x2f3c

	[0058.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WING1.WMF", dwFileAttributes=0x80) returned 0
	[0058.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WING1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wing1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.131] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2243
	os_tid = 0x2f40

	[0058.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WING2.WMF", dwFileAttributes=0x80) returned 0
	[0058.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WING2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wing2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.136] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2244
	os_tid = 0x2f44

	[0058.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID", dwFileAttributes=0x80) returned 0
	[0058.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.140] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2245
	os_tid = 0x2f48

	[0058.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", dwFileAttributes=0x80) returned 0
	[0058.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2246
	os_tid = 0x2f4c

	[0058.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", dwFileAttributes=0x80) returned 0
	[0058.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.153] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2247
	os_tid = 0x2f50

	[0058.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", dwFileAttributes=0x80) returned 0
	[0058.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2248
	os_tid = 0x2f54

	[0058.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", dwFileAttributes=0x80) returned 0
	[0058.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2249
	os_tid = 0x2f58

	[0058.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", dwFileAttributes=0x80) returned 0
	[0058.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2250
	os_tid = 0x2f5c

	[0058.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", dwFileAttributes=0x80) returned 0
	[0058.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2251
	os_tid = 0x2f60

	[0058.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", dwFileAttributes=0x80) returned 0
	[0058.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2252
	os_tid = 0x2f64

	[0058.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", dwFileAttributes=0x80) returned 0
	[0058.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.159] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2253
	os_tid = 0x2f68

	[0058.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", dwFileAttributes=0x80) returned 0
	[0058.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.163] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2254
	os_tid = 0x2f6c

	[0058.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", dwFileAttributes=0x80) returned 0
	[0058.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2255
	os_tid = 0x2f70

	[0058.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", dwFileAttributes=0x80) returned 0
	[0058.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2256
	os_tid = 0x2f74

	[0058.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", dwFileAttributes=0x80) returned 0
	[0058.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2257
	os_tid = 0x2f78

	[0058.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", dwFileAttributes=0x80) returned 0
	[0058.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2258
	os_tid = 0x2f7c

	[0058.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", dwFileAttributes=0x80) returned 0
	[0058.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2259
	os_tid = 0x2f80

	[0058.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", dwFileAttributes=0x80) returned 0
	[0058.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2260
	os_tid = 0x2f84

	[0058.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", dwFileAttributes=0x80) returned 0
	[0058.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2261
	os_tid = 0x2f88

	[0058.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", dwFileAttributes=0x80) returned 0
	[0058.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2262
	os_tid = 0x2f8c

	[0058.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", dwFileAttributes=0x80) returned 0
	[0058.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2263
	os_tid = 0x2f90

	[0058.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", dwFileAttributes=0x80) returned 0
	[0058.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2264
	os_tid = 0x2f94

	[0058.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", dwFileAttributes=0x80) returned 0
	[0058.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2265
	os_tid = 0x2f98

	[0058.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", dwFileAttributes=0x80) returned 0
	[0058.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2266
	os_tid = 0x2f9c

	[0058.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", dwFileAttributes=0x80) returned 0
	[0058.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2267
	os_tid = 0x2fa0

	[0058.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", dwFileAttributes=0x80) returned 0
	[0058.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2268
	os_tid = 0x2fa4

	[0058.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", dwFileAttributes=0x80) returned 0
	[0058.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2269
	os_tid = 0x2fa8

	[0058.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", dwFileAttributes=0x80) returned 0
	[0058.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2270
	os_tid = 0x2fac

	[0058.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", dwFileAttributes=0x80) returned 0
	[0058.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2271
	os_tid = 0x2fb0

	[0058.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", dwFileAttributes=0x80) returned 0
	[0058.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2272
	os_tid = 0x2fb4

	[0058.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", dwFileAttributes=0x80) returned 0
	[0058.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2273
	os_tid = 0x2fb8

	[0058.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", dwFileAttributes=0x80) returned 0
	[0058.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2274
	os_tid = 0x2fbc

	[0058.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", dwFileAttributes=0x80) returned 0
	[0058.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2275
	os_tid = 0x2fc0

	[0058.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", dwFileAttributes=0x80) returned 0
	[0058.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2276
	os_tid = 0x2fc4

	[0058.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", dwFileAttributes=0x80) returned 0
	[0058.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2277
	os_tid = 0x2fc8

	[0058.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", dwFileAttributes=0x80) returned 0
	[0058.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2278
	os_tid = 0x2fcc

	[0058.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", dwFileAttributes=0x80) returned 0
	[0058.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2279
	os_tid = 0x2fe4

	[0058.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", dwFileAttributes=0x80) returned 0
	[0058.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2280
	os_tid = 0x2fe8

	[0058.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", dwFileAttributes=0x80) returned 0
	[0058.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2281
	os_tid = 0x2fec

	[0058.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", dwFileAttributes=0x80) returned 0
	[0058.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2282
	os_tid = 0x2ff0

	[0058.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", dwFileAttributes=0x80) returned 0
	[0058.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2283
	os_tid = 0x2ff4

	[0058.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", dwFileAttributes=0x80) returned 0
	[0058.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2284
	os_tid = 0x2ff8

	[0058.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", dwFileAttributes=0x80) returned 0
	[0058.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2285
	os_tid = 0x2ffc

	[0058.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", dwFileAttributes=0x80) returned 0
	[0058.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.394] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2286
	os_tid = 0x3004

	[0058.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", dwFileAttributes=0x80) returned 0
	[0058.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2287
	os_tid = 0x3008

	[0058.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", dwFileAttributes=0x80) returned 0
	[0058.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2288
	os_tid = 0x300c

	[0058.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", dwFileAttributes=0x80) returned 0
	[0058.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2289
	os_tid = 0x3010

	[0058.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", dwFileAttributes=0x80) returned 0
	[0058.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2290
	os_tid = 0x3014

	[0058.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", dwFileAttributes=0x80) returned 0
	[0058.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2291
	os_tid = 0x3018

	[0058.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", dwFileAttributes=0x80) returned 0
	[0058.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2292
	os_tid = 0x301c

	[0058.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", dwFileAttributes=0x80) returned 0
	[0058.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2293
	os_tid = 0x3020

	[0058.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", dwFileAttributes=0x80) returned 0
	[0058.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2294
	os_tid = 0x3024

	[0058.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", dwFileAttributes=0x80) returned 0
	[0058.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2295
	os_tid = 0x3028

	[0058.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", dwFileAttributes=0x80) returned 0
	[0058.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.432] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2296
	os_tid = 0x302c

	[0058.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", dwFileAttributes=0x80) returned 0
	[0058.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.435] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2297
	os_tid = 0x3030

	[0058.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 0
	[0058.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.439] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2298
	os_tid = 0x3034

	[0058.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", dwFileAttributes=0x80) returned 0
	[0058.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2299
	os_tid = 0x3038

	[0058.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", dwFileAttributes=0x80) returned 0
	[0058.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.446] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2300
	os_tid = 0x303c

	[0058.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", dwFileAttributes=0x80) returned 0
	[0058.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.451] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2301
	os_tid = 0x3040

	[0058.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", dwFileAttributes=0x80) returned 0
	[0058.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2302
	os_tid = 0x3044

	[0058.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", dwFileAttributes=0x80) returned 0
	[0058.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2303
	os_tid = 0x3048

	[0058.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", dwFileAttributes=0x80) returned 0
	[0058.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.462] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2304
	os_tid = 0x304c

	[0058.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", dwFileAttributes=0x80) returned 0
	[0058.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2305
	os_tid = 0x3050

	[0058.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", dwFileAttributes=0x80) returned 0
	[0058.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2306
	os_tid = 0x3054

	[0058.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", dwFileAttributes=0x80) returned 0
	[0058.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.474] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2307
	os_tid = 0x3058

	[0058.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", dwFileAttributes=0x80) returned 0
	[0058.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2308
	os_tid = 0x305c

	[0058.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", dwFileAttributes=0x80) returned 0
	[0058.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2309
	os_tid = 0x3060

	[0058.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", dwFileAttributes=0x80) returned 0
	[0058.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2310
	os_tid = 0x3064

	[0058.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", dwFileAttributes=0x80) returned 0
	[0058.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2311
	os_tid = 0x3068

	[0058.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", dwFileAttributes=0x80) returned 0
	[0058.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.496] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2312
	os_tid = 0x306c

	[0058.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", dwFileAttributes=0x80) returned 0
	[0058.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2313
	os_tid = 0x3070

	[0058.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", dwFileAttributes=0x80) returned 0
	[0058.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.504] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2314
	os_tid = 0x3074

	[0058.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", dwFileAttributes=0x80) returned 0
	[0058.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2315
	os_tid = 0x3078

	[0058.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", dwFileAttributes=0x80) returned 0
	[0058.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.511] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2316
	os_tid = 0x307c

	[0058.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", dwFileAttributes=0x80) returned 0
	[0058.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.515] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2317
	os_tid = 0x3080

	[0058.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", dwFileAttributes=0x80) returned 0
	[0058.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.518] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2318
	os_tid = 0x3084

	[0058.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", dwFileAttributes=0x80) returned 0
	[0058.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2319
	os_tid = 0x3088

	[0058.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", dwFileAttributes=0x80) returned 0
	[0058.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.526] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2320
	os_tid = 0x308c

	[0058.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", dwFileAttributes=0x80) returned 0
	[0058.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.529] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2321
	os_tid = 0x3090

	[0058.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", dwFileAttributes=0x80) returned 0
	[0058.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.533] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2322
	os_tid = 0x3094

	[0058.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", dwFileAttributes=0x80) returned 0
	[0058.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.537] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2323
	os_tid = 0x3098

	[0058.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", dwFileAttributes=0x80) returned 0
	[0058.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.543] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2324
	os_tid = 0x309c

	[0058.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", dwFileAttributes=0x80) returned 0
	[0058.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2325
	os_tid = 0x30a0

	[0058.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", dwFileAttributes=0x80) returned 0
	[0058.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2326
	os_tid = 0x30a4

	[0058.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", dwFileAttributes=0x80) returned 0
	[0058.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.558] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2327
	os_tid = 0x30a8

	[0058.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", dwFileAttributes=0x80) returned 0
	[0058.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2328
	os_tid = 0x30ac

	[0058.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", dwFileAttributes=0x80) returned 0
	[0058.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.565] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2329
	os_tid = 0x30b0

	[0058.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", dwFileAttributes=0x80) returned 0
	[0058.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2330
	os_tid = 0x30b4

	[0058.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", dwFileAttributes=0x80) returned 0
	[0058.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.574] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2331
	os_tid = 0x30b8

	[0058.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", dwFileAttributes=0x80) returned 0
	[0058.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2332
	os_tid = 0x30bc

	[0058.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", dwFileAttributes=0x80) returned 0
	[0058.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2333
	os_tid = 0x30c0

	[0058.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", dwFileAttributes=0x80) returned 0
	[0058.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.587] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2334
	os_tid = 0x30c4

	[0058.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", dwFileAttributes=0x80) returned 0
	[0058.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2335
	os_tid = 0x30c8

	[0058.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", dwFileAttributes=0x80) returned 0
	[0058.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.595] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2336
	os_tid = 0x30cc

	[0058.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", dwFileAttributes=0x80) returned 0
	[0058.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2337
	os_tid = 0x30d0

	[0058.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", dwFileAttributes=0x80) returned 0
	[0058.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.604] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2338
	os_tid = 0x30d4

	[0058.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", dwFileAttributes=0x80) returned 0
	[0058.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.609] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2339
	os_tid = 0x30d8

	[0058.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", dwFileAttributes=0x80) returned 0
	[0058.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.614] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2340
	os_tid = 0x30dc

	[0058.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", dwFileAttributes=0x80) returned 0
	[0058.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.619] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2341
	os_tid = 0x30e0

	[0058.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", dwFileAttributes=0x80) returned 0
	[0058.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.625] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2342
	os_tid = 0x30e4

	[0058.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", dwFileAttributes=0x80) returned 0
	[0058.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.630] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2343
	os_tid = 0x30e8

	[0058.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", dwFileAttributes=0x80) returned 0
	[0058.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.635] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2344
	os_tid = 0x30ec

	[0058.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", dwFileAttributes=0x80) returned 0
	[0058.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.639] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2345
	os_tid = 0x30f0

	[0058.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", dwFileAttributes=0x80) returned 0
	[0058.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2346
	os_tid = 0x30f4

	[0058.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", dwFileAttributes=0x80) returned 0
	[0058.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2347
	os_tid = 0x30f8

	[0058.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", dwFileAttributes=0x80) returned 0
	[0058.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2348
	os_tid = 0x30fc

	[0058.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", dwFileAttributes=0x80) returned 0
	[0058.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2349
	os_tid = 0x3100

	[0058.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", dwFileAttributes=0x80) returned 0
	[0058.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2350
	os_tid = 0x3104

	[0058.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", dwFileAttributes=0x80) returned 0
	[0058.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.659] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2351
	os_tid = 0x3108

	[0058.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", dwFileAttributes=0x80) returned 0
	[0058.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.663] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2352
	os_tid = 0x310c

	[0058.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", dwFileAttributes=0x80) returned 0
	[0058.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.667] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2353
	os_tid = 0x3110

	[0058.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", dwFileAttributes=0x80) returned 0
	[0058.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2354
	os_tid = 0x3114

	[0058.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", dwFileAttributes=0x80) returned 0
	[0058.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.674] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2355
	os_tid = 0x3118

	[0058.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", dwFileAttributes=0x80) returned 0
	[0058.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2356
	os_tid = 0x311c

	[0058.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", dwFileAttributes=0x80) returned 0
	[0058.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.676] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2357
	os_tid = 0x3120

	[0058.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2358
	os_tid = 0x3124

	[0058.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2359
	os_tid = 0x3128

	[0058.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.679] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2360
	os_tid = 0x312c

	[0058.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2361
	os_tid = 0x3130

	[0058.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2362
	os_tid = 0x3134

	[0058.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2363
	os_tid = 0x3138

	[0058.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2364
	os_tid = 0x313c

	[0058.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2365
	os_tid = 0x3140

	[0058.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2366
	os_tid = 0x3144

	[0058.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2367
	os_tid = 0x3148

	[0058.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2368
	os_tid = 0x3154

	[0058.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2369
	os_tid = 0x3158

	[0058.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2370
	os_tid = 0x315c

	[0058.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.843] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2371
	os_tid = 0x3160

	[0058.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2372
	os_tid = 0x3164

	[0058.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.851] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2373
	os_tid = 0x3168

	[0058.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.855] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2374
	os_tid = 0x316c

	[0058.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.859] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2375
	os_tid = 0x3170

	[0058.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.863] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2376
	os_tid = 0x3174

	[0058.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.866] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2377
	os_tid = 0x3178

	[0058.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2378
	os_tid = 0x317c

	[0058.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2379
	os_tid = 0x3180

	[0058.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2380
	os_tid = 0x3184

	[0058.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2381
	os_tid = 0x3188

	[0058.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2382
	os_tid = 0x318c

	[0058.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.890] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2383
	os_tid = 0x3190

	[0058.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2384
	os_tid = 0x3194

	[0058.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2385
	os_tid = 0x3198

	[0058.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.902] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2386
	os_tid = 0x319c

	[0058.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x80) returned 0
	[0058.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.906] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2387
	os_tid = 0x31a0

	[0058.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x80) returned 0
	[0058.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.910] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2388
	os_tid = 0x31a4

	[0058.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.914] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2389
	os_tid = 0x31a8

	[0058.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.918] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2390
	os_tid = 0x31ac

	[0058.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.923] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2391
	os_tid = 0x31b0

	[0058.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.928] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2392
	os_tid = 0x31b4

	[0058.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.934] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2393
	os_tid = 0x31b8

	[0058.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2394
	os_tid = 0x31bc

	[0058.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x80) returned 0
	[0058.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2395
	os_tid = 0x31c0

	[0058.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x80) returned 0
	[0058.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.948] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2396
	os_tid = 0x31c4

	[0058.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", dwFileAttributes=0x80) returned 0
	[0058.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2397
	os_tid = 0x31c8

	[0058.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", dwFileAttributes=0x80) returned 0
	[0058.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.956] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2398
	os_tid = 0x31cc

	[0058.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", dwFileAttributes=0x80) returned 0
	[0058.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.959] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2399
	os_tid = 0x31d0

	[0058.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.960] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2400
	os_tid = 0x31d4

	[0058.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.961] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2401
	os_tid = 0x31d8

	[0058.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.962] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2402
	os_tid = 0x31dc

	[0058.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.964] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2403
	os_tid = 0x31e0

	[0058.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.965] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2404
	os_tid = 0x31e4

	[0058.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2405
	os_tid = 0x31e8

	[0058.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.967] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2406
	os_tid = 0x31ec

	[0058.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.968] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2407
	os_tid = 0x31f0

	[0058.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2408
	os_tid = 0x31f4

	[0058.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2409
	os_tid = 0x31f8

	[0058.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.971] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2410
	os_tid = 0x31fc

	[0058.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2411
	os_tid = 0x3200

	[0058.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2412
	os_tid = 0x3204

	[0058.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2413
	os_tid = 0x3208

	[0058.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.974] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2414
	os_tid = 0x320c

	[0058.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2415
	os_tid = 0x3210

	[0058.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2416
	os_tid = 0x3214

	[0058.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2417
	os_tid = 0x3218

	[0058.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.977] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2418
	os_tid = 0x321c

	[0058.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0058.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0058.978] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2419
	os_tid = 0x3220

	[0059.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.090] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2420
	os_tid = 0x3224

	[0059.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.092] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2421
	os_tid = 0x3228

	[0059.092] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.093] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2422
	os_tid = 0x322c

	[0059.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.094] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2423
	os_tid = 0x3230

	[0059.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.095] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2424
	os_tid = 0x3234

	[0059.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.096] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2425
	os_tid = 0x3238

	[0059.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.097] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2426
	os_tid = 0x323c

	[0059.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.098] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2427
	os_tid = 0x3240

	[0059.098] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2428
	os_tid = 0x3244

	[0059.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2429
	os_tid = 0x3248

	[0059.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.100] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2430
	os_tid = 0x324c

	[0059.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.101] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2431
	os_tid = 0x3250

	[0059.101] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.102] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2432
	os_tid = 0x3254

	[0059.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.102] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2433
	os_tid = 0x3258

	[0059.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.103] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2434
	os_tid = 0x325c

	[0059.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2435
	os_tid = 0x3260

	[0059.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2436
	os_tid = 0x3264

	[0059.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2437
	os_tid = 0x3268

	[0059.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.107] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2438
	os_tid = 0x326c

	[0059.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.108] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2439
	os_tid = 0x3270

	[0059.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2440
	os_tid = 0x3274

	[0059.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2441
	os_tid = 0x3278

	[0059.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.110] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2442
	os_tid = 0x327c

	[0059.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.111] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2443
	os_tid = 0x3280

	[0059.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2444
	os_tid = 0x3284

	[0059.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2445
	os_tid = 0x3288

	[0059.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.113] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2446
	os_tid = 0x328c

	[0059.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.114] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2447
	os_tid = 0x3290

	[0059.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.115] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2448
	os_tid = 0x3294

	[0059.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2449
	os_tid = 0x3298

	[0059.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2450
	os_tid = 0x329c

	[0059.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2451
	os_tid = 0x32a0

	[0059.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.118] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2452
	os_tid = 0x32a4

	[0059.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.119] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2453
	os_tid = 0x32a8

	[0059.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.120] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2454
	os_tid = 0x32ac

	[0059.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2455
	os_tid = 0x32b0

	[0059.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.122] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2456
	os_tid = 0x32b4

	[0059.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2457
	os_tid = 0x32b8

	[0059.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2458
	os_tid = 0x32bc

	[0059.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.124] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2459
	os_tid = 0x32c0

	[0059.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2460
	os_tid = 0x32c4

	[0059.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2461
	os_tid = 0x32c8

	[0059.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.193] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2462
	os_tid = 0x32cc

	[0059.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.193] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2463
	os_tid = 0x32d0

	[0059.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2464
	os_tid = 0x32d4

	[0059.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2465
	os_tid = 0x32d8

	[0059.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.196] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2466
	os_tid = 0x32dc

	[0059.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.196] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2467
	os_tid = 0x32e0

	[0059.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2468
	os_tid = 0x32e4

	[0059.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.199] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2469
	os_tid = 0x32e8

	[0059.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.199] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2470
	os_tid = 0x32ec

	[0059.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.200] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2471
	os_tid = 0x32f0

	[0059.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.201] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2472
	os_tid = 0x32f4

	[0059.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2473
	os_tid = 0x32f8

	[0059.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.204] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2474
	os_tid = 0x32fc

	[0059.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.206] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2475
	os_tid = 0x3300

	[0059.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2476
	os_tid = 0x3304

	[0059.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2477
	os_tid = 0x3308

	[0059.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.208] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2478
	os_tid = 0x330c

	[0059.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.209] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2479
	os_tid = 0x3310

	[0059.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2480
	os_tid = 0x3314

	[0059.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.211] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2481
	os_tid = 0x3318

	[0059.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.211] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2482
	os_tid = 0x331c

	[0059.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.212] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2483
	os_tid = 0x3320

	[0059.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2484
	os_tid = 0x3324

	[0059.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2485
	os_tid = 0x3328

	[0059.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.215] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2486
	os_tid = 0x332c

	[0059.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.216] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2487
	os_tid = 0x3330

	[0059.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.217] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2488
	os_tid = 0x3334

	[0059.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2489
	os_tid = 0x3338

	[0059.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2490
	os_tid = 0x333c

	[0059.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2491
	os_tid = 0x3340

	[0059.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.220] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2492
	os_tid = 0x3344

	[0059.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.221] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2493
	os_tid = 0x3348

	[0059.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.222] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2494
	os_tid = 0x334c

	[0059.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.222] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2495
	os_tid = 0x3350

	[0059.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.223] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2496
	os_tid = 0x3354

	[0059.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.224] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2497
	os_tid = 0x3358

	[0059.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.225] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2498
	os_tid = 0x335c

	[0059.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.226] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2499
	os_tid = 0x3360

	[0059.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.281] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2500
	os_tid = 0x3364

	[0059.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2501
	os_tid = 0x3368

	[0059.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2502
	os_tid = 0x336c

	[0059.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2503
	os_tid = 0x3370

	[0059.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2504
	os_tid = 0x3374

	[0059.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.287] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2505
	os_tid = 0x3378

	[0059.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2506
	os_tid = 0x337c

	[0059.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2507
	os_tid = 0x3380

	[0059.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2508
	os_tid = 0x3384

	[0059.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.291] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2509
	os_tid = 0x3388

	[0059.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2510
	os_tid = 0x338c

	[0059.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2511
	os_tid = 0x3390

	[0059.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2512
	os_tid = 0x3394

	[0059.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2513
	os_tid = 0x3398

	[0059.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.296] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2514
	os_tid = 0x339c

	[0059.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2515
	os_tid = 0x33a0

	[0059.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.298] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2516
	os_tid = 0x33a4

	[0059.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.299] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2517
	os_tid = 0x33a8

	[0059.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.300] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2518
	os_tid = 0x33ac

	[0059.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.300] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2519
	os_tid = 0x33b0

	[0059.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.301] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2520
	os_tid = 0x33b4

	[0059.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2521
	os_tid = 0x33b8

	[0059.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.310] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2522
	os_tid = 0x33bc

	[0059.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.311] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2523
	os_tid = 0x33c0

	[0059.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.312] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2524
	os_tid = 0x33c4

	[0059.312] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.312] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2525
	os_tid = 0x33c8

	[0059.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.313] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2526
	os_tid = 0x33cc

	[0059.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.314] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2527
	os_tid = 0x33d0

	[0059.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.315] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2528
	os_tid = 0x33d4

	[0059.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2529
	os_tid = 0x33d8

	[0059.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2530
	os_tid = 0x33dc

	[0059.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2531
	os_tid = 0x33e0

	[0059.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2532
	os_tid = 0x33e4

	[0059.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2533
	os_tid = 0x33e8

	[0059.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2534
	os_tid = 0x33ec

	[0059.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2535
	os_tid = 0x33f0

	[0059.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.322] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2536
	os_tid = 0x33f4

	[0059.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2537
	os_tid = 0x33f8

	[0059.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2538
	os_tid = 0x33fc

	[0059.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2539
	os_tid = 0x3404

	[0059.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.385] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2540
	os_tid = 0x3408

	[0059.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2541
	os_tid = 0x340c

	[0059.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.387] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2542
	os_tid = 0x3410

	[0059.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.388] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2543
	os_tid = 0x3414

	[0059.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2544
	os_tid = 0x3418

	[0059.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2545
	os_tid = 0x341c

	[0059.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2546
	os_tid = 0x3420

	[0059.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2547
	os_tid = 0x3424

	[0059.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2548
	os_tid = 0x3428

	[0059.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2549
	os_tid = 0x342c

	[0059.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2550
	os_tid = 0x3430

	[0059.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.394] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2551
	os_tid = 0x3434

	[0059.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2552
	os_tid = 0x3438

	[0059.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.396] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2553
	os_tid = 0x343c

	[0059.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.396] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2554
	os_tid = 0x3440

	[0059.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.397] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2555
	os_tid = 0x3444

	[0059.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2556
	os_tid = 0x3448

	[0059.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2557
	os_tid = 0x344c

	[0059.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2558
	os_tid = 0x3450

	[0059.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.400] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2559
	os_tid = 0x3454

	[0059.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.400] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2560
	os_tid = 0x3458

	[0059.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.401] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2561
	os_tid = 0x345c

	[0059.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2562
	os_tid = 0x3460

	[0059.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2563
	os_tid = 0x3464

	[0059.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.404] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2564
	os_tid = 0x3468

	[0059.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2565
	os_tid = 0x346c

	[0059.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2566
	os_tid = 0x3470

	[0059.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2567
	os_tid = 0x3474

	[0059.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2568
	os_tid = 0x3478

	[0059.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2569
	os_tid = 0x347c

	[0059.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2570
	os_tid = 0x3480

	[0059.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2571
	os_tid = 0x3484

	[0059.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2572
	os_tid = 0x3488

	[0059.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.479] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2573
	os_tid = 0x348c

	[0059.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.480] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2574
	os_tid = 0x3490

	[0059.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.481] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2575
	os_tid = 0x3494

	[0059.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2576
	os_tid = 0x3498

	[0059.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2577
	os_tid = 0x349c

	[0059.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2578
	os_tid = 0x34a0

	[0059.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.484] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2579
	os_tid = 0x34a4

	[0059.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2580
	os_tid = 0x34a8

	[0059.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.486] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2581
	os_tid = 0x34ac

	[0059.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2582
	os_tid = 0x34b0

	[0059.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2583
	os_tid = 0x34b4

	[0059.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2584
	os_tid = 0x34b8

	[0059.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2585
	os_tid = 0x34bc

	[0059.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.490] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2586
	os_tid = 0x34c0

	[0059.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2587
	os_tid = 0x34c4

	[0059.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2588
	os_tid = 0x34c8

	[0059.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2589
	os_tid = 0x34cc

	[0059.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2590
	os_tid = 0x34d0

	[0059.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2591
	os_tid = 0x34d4

	[0059.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2592
	os_tid = 0x34d8

	[0059.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.496] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2593
	os_tid = 0x34dc

	[0059.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2594
	os_tid = 0x34e0

	[0059.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2595
	os_tid = 0x34e4

	[0059.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.499] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2596
	os_tid = 0x34e8

	[0059.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2597
	os_tid = 0x34ec

	[0059.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2598
	os_tid = 0x34f0

	[0059.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2599
	os_tid = 0x34f4

	[0059.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2600
	os_tid = 0x34f8

	[0059.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2601
	os_tid = 0x34fc

	[0059.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2602
	os_tid = 0x3500

	[0059.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2603
	os_tid = 0x3504

	[0059.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2604
	os_tid = 0x3508

	[0059.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2605
	os_tid = 0x350c

	[0059.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2606
	os_tid = 0x3510

	[0059.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2607
	os_tid = 0x3514

	[0059.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2608
	os_tid = 0x3518

	[0059.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.584] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2609
	os_tid = 0x351c

	[0059.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2610
	os_tid = 0x3520

	[0059.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2611
	os_tid = 0x3524

	[0059.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2612
	os_tid = 0x3528

	[0059.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.587] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2613
	os_tid = 0x352c

	[0059.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.588] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2614
	os_tid = 0x3530

	[0059.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.589] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2615
	os_tid = 0x3534

	[0059.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2616
	os_tid = 0x3538

	[0059.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.591] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2617
	os_tid = 0x353c

	[0059.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.592] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2618
	os_tid = 0x3540

	[0059.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.593] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2619
	os_tid = 0x3544

	[0059.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.593] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2620
	os_tid = 0x3548

	[0059.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.594] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2621
	os_tid = 0x354c

	[0059.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.595] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2622
	os_tid = 0x3550

	[0059.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.596] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2623
	os_tid = 0x3554

	[0059.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.597] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2624
	os_tid = 0x3558

	[0059.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.598] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2625
	os_tid = 0x355c

	[0059.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2626
	os_tid = 0x3560

	[0059.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.600] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2627
	os_tid = 0x3564

	[0059.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.601] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2628
	os_tid = 0x3568

	[0059.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.602] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2629
	os_tid = 0x356c

	[0059.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.603] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2630
	os_tid = 0x3570

	[0059.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.604] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2631
	os_tid = 0x3574

	[0059.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.605] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2632
	os_tid = 0x3578

	[0059.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.606] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2633
	os_tid = 0x357c

	[0059.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2634
	os_tid = 0x3580

	[0059.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.608] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2635
	os_tid = 0x3584

	[0059.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2636
	os_tid = 0x3588

	[0059.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.669] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2637
	os_tid = 0x358c

	[0059.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.670] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2638
	os_tid = 0x3590

	[0059.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2639
	os_tid = 0x3594

	[0059.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2640
	os_tid = 0x3598

	[0059.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.673] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2641
	os_tid = 0x359c

	[0059.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.674] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2642
	os_tid = 0x35a0

	[0059.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2643
	os_tid = 0x35a4

	[0059.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2644
	os_tid = 0x35a8

	[0059.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.676] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2645
	os_tid = 0x35ac

	[0059.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2646
	os_tid = 0x35b0

	[0059.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2647
	os_tid = 0x35b4

	[0059.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2648
	os_tid = 0x35b8

	[0059.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.679] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2649
	os_tid = 0x35bc

	[0059.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2650
	os_tid = 0x35c0

	[0059.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2651
	os_tid = 0x35c4

	[0059.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2652
	os_tid = 0x35c8

	[0059.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.682] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2653
	os_tid = 0x35cc

	[0059.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.682] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2654
	os_tid = 0x35d0

	[0059.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.683] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2655
	os_tid = 0x35d4

	[0059.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2656
	os_tid = 0x35d8

	[0059.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2657
	os_tid = 0x35dc

	[0059.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2658
	os_tid = 0x35e0

	[0059.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2659
	os_tid = 0x35e4

	[0059.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2660
	os_tid = 0x35e8

	[0059.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2661
	os_tid = 0x35ec

	[0059.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2662
	os_tid = 0x35f0

	[0059.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2663
	os_tid = 0x35f4

	[0059.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2664
	os_tid = 0x35f8

	[0059.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2665
	os_tid = 0x35fc

	[0059.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2666
	os_tid = 0x3600

	[0059.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2667
	os_tid = 0x3604

	[0059.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2668
	os_tid = 0x3608

	[0059.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2669
	os_tid = 0x360c

	[0059.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2670
	os_tid = 0x3610

	[0059.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2671
	os_tid = 0x3614

	[0059.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2672
	os_tid = 0x3618

	[0059.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2673
	os_tid = 0x361c

	[0059.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2674
	os_tid = 0x3620

	[0059.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2675
	os_tid = 0x3624

	[0059.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2676
	os_tid = 0x3628

	[0059.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2677
	os_tid = 0x362c

	[0059.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2678
	os_tid = 0x3630

	[0059.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2679
	os_tid = 0x3634

	[0059.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2680
	os_tid = 0x3638

	[0059.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2681
	os_tid = 0x363c

	[0059.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2682
	os_tid = 0x3640

	[0059.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.754] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2683
	os_tid = 0x3644

	[0059.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.757] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2684
	os_tid = 0x3648

	[0059.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.760] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2685
	os_tid = 0x364c

	[0059.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.764] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2686
	os_tid = 0x3650

	[0059.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2687
	os_tid = 0x3654

	[0059.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.770] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2688
	os_tid = 0x3658

	[0059.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.774] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2689
	os_tid = 0x365c

	[0059.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2690
	os_tid = 0x3660

	[0059.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2691
	os_tid = 0x3664

	[0059.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.776] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2692
	os_tid = 0x3668

	[0059.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.777] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2693
	os_tid = 0x366c

	[0059.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.778] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2694
	os_tid = 0x3670

	[0059.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.779] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2695
	os_tid = 0x3674

	[0059.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.780] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2696
	os_tid = 0x3678

	[0059.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.781] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2697
	os_tid = 0x367c

	[0059.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2698
	os_tid = 0x3680

	[0059.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2699
	os_tid = 0x3684

	[0059.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2700
	os_tid = 0x3688

	[0059.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2701
	os_tid = 0x368c

	[0059.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2702
	os_tid = 0x3690

	[0059.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2703
	os_tid = 0x3694

	[0059.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.787] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2704
	os_tid = 0x3698

	[0059.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.788] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2705
	os_tid = 0x369c

	[0059.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.789] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2706
	os_tid = 0x36a0

	[0059.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2707
	os_tid = 0x36a4

	[0059.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2708
	os_tid = 0x36a8

	[0059.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.791] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2709
	os_tid = 0x36ac

	[0059.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.792] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2710
	os_tid = 0x36b0

	[0059.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.793] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2711
	os_tid = 0x36b4

	[0059.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.794] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2712
	os_tid = 0x36b8

	[0059.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2713
	os_tid = 0x36bc

	[0059.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2714
	os_tid = 0x36c0

	[0059.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2715
	os_tid = 0x36c4

	[0059.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.798] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2716
	os_tid = 0x36c8

	[0059.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.798] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2717
	os_tid = 0x36cc

	[0059.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.799] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2718
	os_tid = 0x36d0

	[0059.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2719
	os_tid = 0x36d4

	[0059.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.802] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2720
	os_tid = 0x36d8

	[0059.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.803] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2721
	os_tid = 0x36dc

	[0059.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2722
	os_tid = 0x36e0

	[0059.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.812] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2723
	os_tid = 0x36e4

	[0059.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2724
	os_tid = 0x36e8

	[0059.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.814] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2725
	os_tid = 0x36ec

	[0059.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2726
	os_tid = 0x36f0

	[0059.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2727
	os_tid = 0x36f4

	[0059.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2728
	os_tid = 0x36f8

	[0059.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2729
	os_tid = 0x36fc

	[0059.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2730
	os_tid = 0x3700

	[0059.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalpipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2731
	os_tid = 0x3704

	[0059.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalpipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2732
	os_tid = 0x3708

	[0059.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalpipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2733
	os_tid = 0x370c

	[0059.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalpipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2734
	os_tid = 0x3710

	[0059.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalpipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2735
	os_tid = 0x3714

	[0059.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalpipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2736
	os_tid = 0x3718

	[0059.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2737
	os_tid = 0x371c

	[0059.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2738
	os_tid = 0x3720

	[0059.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2739
	os_tid = 0x3724

	[0059.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2740
	os_tid = 0x3728

	[0059.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2741
	os_tid = 0x372c

	[0059.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2742
	os_tid = 0x3730

	[0059.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2743
	os_tid = 0x3734

	[0059.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.839] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2744
	os_tid = 0x3738

	[0059.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.840] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2745
	os_tid = 0x373c

	[0059.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.842] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2746
	os_tid = 0x3740

	[0059.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.920] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2747
	os_tid = 0x3744

	[0059.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.921] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2748
	os_tid = 0x3748

	[0059.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personalr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.922] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2749
	os_tid = 0x374c

	[0059.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.923] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2750
	os_tid = 0x3750

	[0059.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.924] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2751
	os_tid = 0x3754

	[0059.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.925] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2752
	os_tid = 0x3758

	[0059.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.926] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2753
	os_tid = 0x375c

	[0059.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.928] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2754
	os_tid = 0x3760

	[0059.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.929] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2755
	os_tid = 0x3764

	[0059.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2756
	os_tid = 0x3768

	[0059.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2757
	os_tid = 0x376c

	[0059.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.931] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2758
	os_tid = 0x3770

	[0059.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.932] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2759
	os_tid = 0x3774

	[0059.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.933] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2760
	os_tid = 0x3778

	[0059.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2761
	os_tid = 0x377c

	[0059.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2762
	os_tid = 0x3780

	[0059.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.938] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2763
	os_tid = 0x3784

	[0059.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2764
	os_tid = 0x3788

	[0059.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.940] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2765
	os_tid = 0x378c

	[0059.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.941] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2766
	os_tid = 0x3790

	[0059.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2767
	os_tid = 0x3794

	[0059.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.945] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2768
	os_tid = 0x3798

	[0059.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2769
	os_tid = 0x379c

	[0059.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PowerPointVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\powerpointvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.947] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2770
	os_tid = 0x37a0

	[0059.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionaldemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.949] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2771
	os_tid = 0x37a4

	[0059.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionaldemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2772
	os_tid = 0x37a8

	[0059.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionaldemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2773
	os_tid = 0x37ac

	[0059.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalpipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2774
	os_tid = 0x37b0

	[0059.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalpipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2775
	os_tid = 0x37b4

	[0059.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalpipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.956] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2776
	os_tid = 0x37b8

	[0059.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalpipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2777
	os_tid = 0x37bc

	[0059.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalpipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.959] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2778
	os_tid = 0x37c0

	[0059.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalpipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.960] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2779
	os_tid = 0x37c4

	[0059.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.963] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2780
	os_tid = 0x37c8

	[0059.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.964] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2781
	os_tid = 0x37cc

	[0059.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2782
	os_tid = 0x37d0

	[0059.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.967] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2783
	os_tid = 0x37d4

	[0059.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.968] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2784
	os_tid = 0x37d8

	[0059.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2785
	os_tid = 0x37dc

	[0059.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2786
	os_tid = 0x37e0

	[0059.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.971] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2787
	os_tid = 0x37e4

	[0059.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2788
	os_tid = 0x37e8

	[0059.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2789
	os_tid = 0x37ec

	[0059.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.974] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2790
	os_tid = 0x37f0

	[0059.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2791
	os_tid = 0x37f4

	[0059.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProfessionalR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\professionalr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2792
	os_tid = 0x37f8

	[0059.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0059.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0059.978] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2793
	os_tid = 0x37fc

	[0059.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.049] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2794
	os_tid = 0x3804

	[0060.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.050] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2795
	os_tid = 0x3808

	[0060.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.051] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2796
	os_tid = 0x380c

	[0060.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.053] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2797
	os_tid = 0x3810

	[0060.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.053] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2798
	os_tid = 0x3814

	[0060.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.054] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2799
	os_tid = 0x3818

	[0060.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2800
	os_tid = 0x381c

	[0060.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProCO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproco365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.160] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2801
	os_tid = 0x3824

	[0060.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprodemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2802
	os_tid = 0x3828

	[0060.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprodemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2803
	os_tid = 0x382c

	[0060.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprodemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.163] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2804
	os_tid = 0x3830

	[0060.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpromsdnr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2805
	os_tid = 0x3834

	[0060.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpromsdnr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2806
	os_tid = 0x3838

	[0060.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpromsdnr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2807
	os_tid = 0x383c

	[0060.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProMSDNR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpromsdnr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2808
	os_tid = 0x3840

	[0060.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2809
	os_tid = 0x3844

	[0060.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2810
	os_tid = 0x3848

	[0060.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2811
	os_tid = 0x384c

	[0060.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2812
	os_tid = 0x3850

	[0060.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2813
	os_tid = 0x3854

	[0060.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2814
	os_tid = 0x3858

	[0060.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2815
	os_tid = 0x385c

	[0060.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2816
	os_tid = 0x3860

	[0060.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectproo365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2817
	os_tid = 0x3864

	[0060.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2818
	os_tid = 0x3868

	[0060.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2819
	os_tid = 0x386c

	[0060.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2820
	os_tid = 0x3870

	[0060.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2821
	os_tid = 0x3874

	[0060.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2822
	os_tid = 0x3878

	[0060.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2823
	os_tid = 0x387c

	[0060.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2824
	os_tid = 0x3880

	[0060.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2825
	os_tid = 0x3884

	[0060.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2826
	os_tid = 0x3888

	[0060.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2827
	os_tid = 0x388c

	[0060.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2828
	os_tid = 0x3890

	[0060.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2829
	os_tid = 0x3894

	[0060.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2830
	os_tid = 0x3898

	[0060.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2831
	os_tid = 0x389c

	[0060.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2832
	os_tid = 0x38a0

	[0060.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2833
	os_tid = 0x38a4

	[0060.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectpror_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.196] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2834
	os_tid = 0x38a8

	[0060.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.197] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2835
	os_tid = 0x38ac

	[0060.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2836
	os_tid = 0x38b0

	[0060.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.200] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2837
	os_tid = 0x38b4

	[0060.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.201] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2838
	os_tid = 0x38b8

	[0060.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.203] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2839
	os_tid = 0x38bc

	[0060.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.204] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2840
	os_tid = 0x38c0

	[0060.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectProVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectprovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.205] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2841
	os_tid = 0x38c4

	[0060.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.206] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2842
	os_tid = 0x38c8

	[0060.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2843
	os_tid = 0x38cc

	[0060.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.208] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2844
	os_tid = 0x38d0

	[0060.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.209] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2845
	os_tid = 0x38d4

	[0060.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2846
	os_tid = 0x38d8

	[0060.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.211] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2847
	os_tid = 0x38dc

	[0060.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.212] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2848
	os_tid = 0x38e0

	[0060.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2849
	os_tid = 0x38e4

	[0060.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdCO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdco365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.215] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2850
	os_tid = 0x38e8

	[0060.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.216] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2851
	os_tid = 0x38ec

	[0060.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2852
	os_tid = 0x38f0

	[0060.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2853
	os_tid = 0x38f4

	[0060.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.221] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2854
	os_tid = 0x38f8

	[0060.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.222] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2855
	os_tid = 0x38fc

	[0060.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.224] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2856
	os_tid = 0x3900

	[0060.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.225] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2857
	os_tid = 0x3904

	[0060.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.227] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2858
	os_tid = 0x3908

	[0060.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdo365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.228] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2859
	os_tid = 0x390c

	[0060.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.229] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2860
	os_tid = 0x3910

	[0060.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.230] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2861
	os_tid = 0x3914

	[0060.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.231] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2862
	os_tid = 0x3918

	[0060.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.232] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2863
	os_tid = 0x391c

	[0060.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.234] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2864
	os_tid = 0x3920

	[0060.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.235] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2865
	os_tid = 0x3924

	[0060.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.236] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2866
	os_tid = 0x3928

	[0060.237] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.237] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2867
	os_tid = 0x392c

	[0060.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2868
	os_tid = 0x3930

	[0060.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2869
	os_tid = 0x3934

	[0060.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.284] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2870
	os_tid = 0x3938

	[0060.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2871
	os_tid = 0x393c

	[0060.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2872
	os_tid = 0x3940

	[0060.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.287] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2873
	os_tid = 0x3944

	[0060.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2874
	os_tid = 0x3948

	[0060.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2875
	os_tid = 0x394c

	[0060.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProjectStdVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\projectstdvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2876
	os_tid = 0x3950

	[0060.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.291] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2877
	os_tid = 0x3954

	[0060.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2878
	os_tid = 0x3958

	[0060.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2879
	os_tid = 0x395c

	[0060.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusmsdnr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2880
	os_tid = 0x3960

	[0060.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusmsdnr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2881
	os_tid = 0x3964

	[0060.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusmsdnr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2882
	os_tid = 0x3968

	[0060.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusMSDNR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusmsdnr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.298] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2883
	os_tid = 0x396c

	[0060.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.300] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2884
	os_tid = 0x3970

	[0060.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.301] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2885
	os_tid = 0x3974

	[0060.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2886
	os_tid = 0x3978

	[0060.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.310] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2887
	os_tid = 0x397c

	[0060.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.312] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2888
	os_tid = 0x3980

	[0060.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.313] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2889
	os_tid = 0x3988

	[0060.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.315] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2890
	os_tid = 0x398c

	[0060.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2891
	os_tid = 0x3990

	[0060.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2892
	os_tid = 0x3994

	[0060.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.318] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2893
	os_tid = 0x399c

	[0060.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2894
	os_tid = 0x39a0

	[0060.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2895
	os_tid = 0x39a4

	[0060.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2896
	os_tid = 0x39a8

	[0060.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2897
	os_tid = 0x39ac

	[0060.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2898
	os_tid = 0x39b0

	[0060.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2899
	os_tid = 0x39b4

	[0060.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2900
	os_tid = 0x39b8

	[0060.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2901
	os_tid = 0x39bc

	[0060.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2902
	os_tid = 0x39c0

	[0060.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2903
	os_tid = 0x39c4

	[0060.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.331] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2904
	os_tid = 0x39c8

	[0060.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp5-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp5-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.332] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2905
	os_tid = 0x39cc

	[0060.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp6-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2906
	os_tid = 0x39d0

	[0060.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp6-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2907
	os_tid = 0x39d4

	[0060.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp6-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2908
	os_tid = 0x39d8

	[0060.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_OEM_Perp6-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_oem_perp6-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.336] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2909
	os_tid = 0x39dc

	[0060.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2910
	os_tid = 0x39e0

	[0060.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2911
	os_tid = 0x39e4

	[0060.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2912
	os_tid = 0x39e8

	[0060.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2913
	os_tid = 0x39ec

	[0060.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2914
	os_tid = 0x39f0

	[0060.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2915
	os_tid = 0x39f4

	[0060.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2916
	os_tid = 0x39f8

	[0060.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2917
	os_tid = 0x39fc

	[0060.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2918
	os_tid = 0x3a00

	[0060.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2919
	os_tid = 0x3a04

	[0060.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2920
	os_tid = 0x3a08

	[0060.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2921
	os_tid = 0x3a0c

	[0060.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2922
	os_tid = 0x3a10

	[0060.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2923
	os_tid = 0x3a14

	[0060.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.349] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2924
	os_tid = 0x3a18

	[0060.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2925
	os_tid = 0x3a1c

	[0060.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ProPlusVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\proplusvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.351] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2926
	os_tid = 0x3a20

	[0060.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.351] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2927
	os_tid = 0x3a24

	[0060.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2928
	os_tid = 0x3a28

	[0060.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2929
	os_tid = 0x3a2c

	[0060.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2930
	os_tid = 0x3a30

	[0060.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.356] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2931
	os_tid = 0x3a34

	[0060.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2932
	os_tid = 0x3a38

	[0060.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.358] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2933
	os_tid = 0x3a3c

	[0060.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2934
	os_tid = 0x3a40

	[0060.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.360] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2935
	os_tid = 0x3a44

	[0060.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2936
	os_tid = 0x3a48

	[0060.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2937
	os_tid = 0x3a4c

	[0060.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2938
	os_tid = 0x3a50

	[0060.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publisherr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.363] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2939
	os_tid = 0x3a54

	[0060.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2940
	os_tid = 0x3a58

	[0060.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2941
	os_tid = 0x3a5c

	[0060.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.366] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2942
	os_tid = 0x3a60

	[0060.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2943
	os_tid = 0x3a64

	[0060.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.369] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2944
	os_tid = 0x3a68

	[0060.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2946
	os_tid = 0x3a6c

	[0060.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PublisherVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\publishervl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.545] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2947
	os_tid = 0x3a70

	[0060.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessEntryR_PrepidBypass-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessEntryR_PrepidBypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessentryr_prepidbypass-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.545] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2948
	os_tid = 0x3a74

	[0060.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessEntryR_PrepidBypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessEntryR_PrepidBypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessentryr_prepidbypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.546] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2949
	os_tid = 0x3a78

	[0060.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessEntryR_PrepidBypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessEntryR_PrepidBypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessentryr_prepidbypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.547] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2950
	os_tid = 0x3a7c

	[0060.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2951
	os_tid = 0x3a80

	[0060.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.549] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2952
	os_tid = 0x3a84

	[0060.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.550] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2953
	os_tid = 0x3a88

	[0060.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.550] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2954
	os_tid = 0x3a8c

	[0060.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.551] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2955
	os_tid = 0x3a90

	[0060.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2956
	os_tid = 0x3a94

	[0060.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.553] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2957
	os_tid = 0x3a98

	[0060.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.554] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2958
	os_tid = 0x3a9c

	[0060.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2959
	os_tid = 0x3aa0

	[0060.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2960
	os_tid = 0x3aa4

	[0060.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2961
	os_tid = 0x3aa8

	[0060.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.558] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2962
	os_tid = 0x3aac

	[0060.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.559] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2963
	os_tid = 0x3ab0

	[0060.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.560] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2964
	os_tid = 0x3ab4

	[0060.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.560] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2965
	os_tid = 0x3ab8

	[0060.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeforBusinessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeforbusinessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.561] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2966
	os_tid = 0x3abc

	[0060.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeServiceBypassR_PrepidBypass-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeServiceBypassR_PrepidBypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeservicebypassr_prepidbypass-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2967
	os_tid = 0x3ac0

	[0060.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeServiceBypassR_PrepidBypass-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeServiceBypassR_PrepidBypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeservicebypassr_prepidbypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.563] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2968
	os_tid = 0x3ac4

	[0060.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeServiceBypassR_PrepidBypass-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\SkypeServiceBypassR_PrepidBypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\skypeservicebypassr_prepidbypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2969
	os_tid = 0x3ac8

	[0060.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardmsdnr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.565] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2970
	os_tid = 0x3acc

	[0060.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardmsdnr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2971
	os_tid = 0x3ad0

	[0060.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardmsdnr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2972
	os_tid = 0x3ad4

	[0060.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardMSDNR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardmsdnr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.567] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2973
	os_tid = 0x3ad8

	[0060.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2974
	os_tid = 0x3adc

	[0060.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2975
	os_tid = 0x3ae0

	[0060.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.570] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2976
	os_tid = 0x3ae4

	[0060.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.571] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2977
	os_tid = 0x3ae8

	[0060.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.572] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2978
	os_tid = 0x3aec

	[0060.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.572] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2979
	os_tid = 0x3af0

	[0060.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2980
	os_tid = 0x3af4

	[0060.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.574] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2981
	os_tid = 0x3af8

	[0060.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2982
	os_tid = 0x3afc

	[0060.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2983
	os_tid = 0x3b00

	[0060.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.577] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2984
	os_tid = 0x3b04

	[0060.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2985
	os_tid = 0x3b08

	[0060.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2986
	os_tid = 0x3b0c

	[0060.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2987
	os_tid = 0x3b10

	[0060.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2988
	os_tid = 0x3b14

	[0060.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\StandardVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\standardvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2989
	os_tid = 0x3b18

	[0060.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2990
	os_tid = 0x3b1c

	[0060.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2991
	os_tid = 0x3b20

	[0060.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.588] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2992
	os_tid = 0x3b24

	[0060.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.588] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2993
	os_tid = 0x3b28

	[0060.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.589] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2994
	os_tid = 0x3b2c

	[0060.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2995
	os_tid = 0x3b30

	[0060.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.591] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2996
	os_tid = 0x3b34

	[0060.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.593] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2997
	os_tid = 0x3b38

	[0060.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProCO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproco365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.594] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2998
	os_tid = 0x3b3c

	[0060.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProDemoR_BypassTrial180-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprodemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.595] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 2999
	os_tid = 0x3b40

	[0060.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProDemoR_BypassTrial180-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprodemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.596] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3000
	os_tid = 0x3b44

	[0060.596] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProDemoR_BypassTrial180-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprodemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.597] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3001
	os_tid = 0x3b48

	[0060.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopromsdnr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.598] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3002
	os_tid = 0x3b4c

	[0060.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopromsdnr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3003
	os_tid = 0x3b50

	[0060.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopromsdnr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3004
	os_tid = 0x3b54

	[0060.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProMSDNR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopromsdnr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.600] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3005
	os_tid = 0x3b58

	[0060.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.601] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3006
	os_tid = 0x3b5c

	[0060.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.602] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3007
	os_tid = 0x3b60

	[0060.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.604] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3008
	os_tid = 0x3b64

	[0060.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.605] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3009
	os_tid = 0x3b68

	[0060.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.606] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3010
	os_tid = 0x3b6c

	[0060.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3011
	os_tid = 0x3b70

	[0060.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3012
	os_tid = 0x3b74

	[0060.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.608] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3013
	os_tid = 0x3b78

	[0060.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioproo365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.609] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3014
	os_tid = 0x3b7c

	[0060.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.610] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3015
	os_tid = 0x3b80

	[0060.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.611] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3016
	os_tid = 0x3b84

	[0060.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.612] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3017
	os_tid = 0x3b88

	[0060.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.613] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3018
	os_tid = 0x3b8c

	[0060.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.719] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3019
	os_tid = 0x3b90

	[0060.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.725] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3020
	os_tid = 0x3b94

	[0060.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3021
	os_tid = 0x3b98

	[0060.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3022
	os_tid = 0x3b9c

	[0060.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3023
	os_tid = 0x3ba0

	[0060.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3024
	os_tid = 0x3ba4

	[0060.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3025
	os_tid = 0x3ba8

	[0060.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3026
	os_tid = 0x3bac

	[0060.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3027
	os_tid = 0x3bb0

	[0060.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3028
	os_tid = 0x3bb4

	[0060.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3029
	os_tid = 0x3bb8

	[0060.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3030
	os_tid = 0x3bbc

	[0060.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiopror_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.804] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3031
	os_tid = 0x3bc0

	[0060.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3032
	os_tid = 0x3bc4

	[0060.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3033
	os_tid = 0x3bc8

	[0060.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3034
	os_tid = 0x3bcc

	[0060.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3035
	os_tid = 0x3bd0

	[0060.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3036
	os_tid = 0x3bd4

	[0060.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.844] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3037
	os_tid = 0x3bd8

	[0060.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioProVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visioprovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.850] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3038
	os_tid = 0x3bdc

	[0060.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.857] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3039
	os_tid = 0x3be0

	[0060.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.863] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3040
	os_tid = 0x3be4

	[0060.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.869] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3041
	os_tid = 0x3be8

	[0060.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.875] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3042
	os_tid = 0x3bec

	[0060.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.881] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3043
	os_tid = 0x3bf0

	[0060.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3044
	os_tid = 0x3bf4

	[0060.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3045
	os_tid = 0x3bf8

	[0060.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3046
	os_tid = 0x3bfc

	[0060.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdCO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdco365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3047
	os_tid = 0xea8

	[0060.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_Subscription-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.910] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3048
	os_tid = 0x3c04

	[0060.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_Subscription-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3049
	os_tid = 0x3c08

	[0060.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_Subscription-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.923] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3050
	os_tid = 0x3c0c

	[0060.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTest-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3051
	os_tid = 0x3c10

	[0060.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTest-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3052
	os_tid = 0x3c14

	[0060.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTest-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.943] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3053
	os_tid = 0x3c18

	[0060.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTrial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.950] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3054
	os_tid = 0x3c1c

	[0060.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTrial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3055
	os_tid = 0x3c20

	[0060.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTrial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdO365R_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdo365r_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.965] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3056
	os_tid = 0x3c24

	[0060.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.971] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3057
	os_tid = 0x3c28

	[0060.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3058
	os_tid = 0x3c2c

	[0060.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3059
	os_tid = 0x3c30

	[0060.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.991] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3060
	os_tid = 0x3c34

	[0060.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0060.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0060.998] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3061
	os_tid = 0x3c38

	[0060.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.004] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3062
	os_tid = 0x3c3c

	[0061.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.081] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3063
	os_tid = 0x3c40

	[0061.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.088] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3064
	os_tid = 0x3c44

	[0061.088] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.093] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3065
	os_tid = 0x3c48

	[0061.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3066
	os_tid = 0x3c4c

	[0061.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3067
	os_tid = 0x3c50

	[0061.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.111] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3068
	os_tid = 0x3c54

	[0061.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3069
	os_tid = 0x3c58

	[0061.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3070
	os_tid = 0x3c5c

	[0061.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.129] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3071
	os_tid = 0x3c60

	[0061.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.135] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3072
	os_tid = 0x3c64

	[0061.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\VisioStdVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\visiostdvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.141] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3073
	os_tid = 0x3c68

	[0061.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Grace-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.148] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3074
	os_tid = 0x3c6c

	[0061.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3075
	os_tid = 0x3c70

	[0061.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3076
	os_tid = 0x3c74

	[0061.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3077
	os_tid = 0x3c78

	[0061.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3078
	os_tid = 0x3c7c

	[0061.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3079
	os_tid = 0x3c80

	[0061.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3080
	os_tid = 0x3c84

	[0061.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.201] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3081
	os_tid = 0x3c88

	[0061.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.208] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3082
	os_tid = 0x3c8c

	[0061.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3083
	os_tid = 0x3c90

	[0061.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Trial-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.221] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3084
	os_tid = 0x3c94

	[0061.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Trial-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.228] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3085
	os_tid = 0x3c98

	[0061.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.234] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3086
	os_tid = 0x3c9c

	[0061.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.241] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3087
	os_tid = 0x3ca0

	[0061.242] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.248] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3088
	os_tid = 0x3ca4

	[0061.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.257] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3089
	os_tid = 0x3ca8

	[0061.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-pl.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.265] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3090
	os_tid = 0x3cac

	[0061.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-ppd.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.272] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3091
	os_tid = 0x3cb0

	[0061.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.279] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3092
	os_tid = 0x3cb4

	[0061.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x80) returned 0
	[0061.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\WordVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\wordvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3093
	os_tid = 0x3cb8

	[0061.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", dwFileAttributes=0x80) returned 0
	[0061.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3094
	os_tid = 0x3cbc

	[0061.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3095
	os_tid = 0x3cc0

	[0061.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml", dwFileAttributes=0x80) returned 0
	[0061.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmuiset.msi.16_accessmuiset.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3096
	os_tid = 0x3cc4

	[0061.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml", dwFileAttributes=0x80) returned 0
	[0061.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\branding.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\branding.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3097
	os_tid = 0x3cc8

	[0061.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\dcfmui.msi.16_dcfmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3098
	os_tid = 0x3ccc

	[0061.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\excelmui.msi.16_excelmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3099
	os_tid = 0x3cd0

	[0061.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\groovemui.msi.16_groovemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3100
	os_tid = 0x3cd4

	[0061.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\lyncmui.msi.16_lyncmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3101
	os_tid = 0x3cd8

	[0061.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\office32mui.msi.16_office32mui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.360] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3102
	os_tid = 0x3cdc

	[0061.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml", dwFileAttributes=0x80) returned 0
	[0061.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_AppXManifestLoc.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_appxmanifestloc.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3103
	os_tid = 0x3ce0

	[0061.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_officemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.368] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3104
	os_tid = 0x3ce4

	[0061.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml", dwFileAttributes=0x80) returned 0
	[0061.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemui.msi.16_PostCommon.Office.MUI.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemui.msi.16_postcommon.office.mui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3105
	os_tid = 0x3ce8

	[0061.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml", dwFileAttributes=0x80) returned 0
	[0061.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\officemuiset.msi.16_officemuiset.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3106
	os_tid = 0x3cec

	[0061.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\onenotemui.msi.16_onenotemui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3107
	os_tid = 0x3cf0

	[0061.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\osmmui.msi.16_osmmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.387] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3108
	os_tid = 0x3cf4

	[0061.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\osmuxmui.msi.16_osmuxmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3109
	os_tid = 0x3cf8

	[0061.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\outlookmui.msi.16_outlookmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3110
	os_tid = 0x3cfc

	[0061.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\powerpointmui.msi.16_powerpointmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3111
	os_tid = 0x3d00

	[0061.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\projectmui.msi.16_projectmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3112
	os_tid = 0x3d04

	[0061.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0
	[0061.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3113
	os_tid = 0x3d08

	[0061.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml", dwFileAttributes=0x80) returned 0
	[0061.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\proofing.msi.16_proofing.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3114
	os_tid = 0x3d0c

	[0061.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\publishermui.msi.16_publishermui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3115
	os_tid = 0x3d10

	[0061.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\visiomui.msi.16_visiomui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.432] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3116
	os_tid = 0x3d14

	[0061.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml", dwFileAttributes=0x80) returned 0
	[0061.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\wordmui.msi.16_wordmui.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.437] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3117
	os_tid = 0x3d1c

	[0061.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0
	[0061.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3118
	os_tid = 0x3d20

	[0061.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml", dwFileAttributes=0x80) returned 0
	[0061.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\Proof.Culture.msi.16_proof.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\proof.culture.msi.16_proof.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.440] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3119
	os_tid = 0x3d24

	[0061.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Access.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\access.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.441] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3120
	os_tid = 0x3d28

	[0061.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\DCF.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\dcf.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.442] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3121
	os_tid = 0x3d2c

	[0061.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Excel.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\excel.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3122
	os_tid = 0x3d30

	[0061.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Groove.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\groove.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.444] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3123
	os_tid = 0x3d34

	[0061.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Lync.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\lync.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.446] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3124
	os_tid = 0x3d38

	[0061.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml", dwFileAttributes=0x80) returned 0
	[0061.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_authored.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_authored.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.448] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3125
	os_tid = 0x3d3c

	[0061.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml", dwFileAttributes=0x80) returned 0
	[0061.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_Common.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_common.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.449] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3126
	os_tid = 0x3d40

	[0061.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml", dwFileAttributes=0x80) returned 0
	[0061.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_licensing.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_licensing.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3127
	os_tid = 0x3d44

	[0061.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.451] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3128
	os_tid = 0x3d48

	[0061.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml", dwFileAttributes=0x80) returned 0
	[0061.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_postcommon.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_postcommon.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.453] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3129
	os_tid = 0x3d4c

	[0061.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", dwFileAttributes=0x80) returned 0
	[0061.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Office.x-none.msi.16_PostCommon.Office.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office.x-none.msi.16_postcommon.office.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3130
	os_tid = 0x3d50

	[0061.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml", dwFileAttributes=0x80) returned 0
	[0061.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office32ww.msi.16_crossbitness.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.456] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3131
	os_tid = 0x3d54

	[0061.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\office32ww.msi.16_office32ww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.457] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3132
	os_tid = 0x3d58

	[0061.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\onenote.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3133
	os_tid = 0x3d5c

	[0061.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml", dwFileAttributes=0x80) returned 0
	[0061.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OneNote.x-none.msi.16_OneNote.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\onenote.x-none.msi.16_onenote.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.462] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3134
	os_tid = 0x3d60

	[0061.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSM.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\osm.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.463] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3135
	os_tid = 0x3d64

	[0061.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\OSMUX.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\osmux.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.465] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3136
	os_tid = 0x3d68

	[0061.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\outlook.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3137
	os_tid = 0x3d6c

	[0061.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", dwFileAttributes=0x80) returned 0
	[0061.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\outlook.x-none.msi.16_postcommon.outlook.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.467] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3138
	os_tid = 0x3d70

	[0061.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPivot.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\powerpivot.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.468] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3139
	os_tid = 0x3d74

	[0061.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\PowerPoint.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\powerpoint.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3140
	os_tid = 0x3d78

	[0061.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Project.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\project.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.472] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3141
	os_tid = 0x3d7c

	[0061.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Publisher.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\publisher.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.473] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3142
	os_tid = 0x3d80

	[0061.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\visio.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.561] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3143
	os_tid = 0x3d84

	[0061.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", dwFileAttributes=0x80) returned 0
	[0061.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\visio.x-none.msi.16_postcommon.visio.x-none.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.567] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3144
	os_tid = 0x3d88

	[0061.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml", dwFileAttributes=0x80) returned 0
	[0061.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\Word.x-none.msi.16_mondoww.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\word.x-none.msi.16_mondoww.mcxml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.571] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3145
	os_tid = 0x3d8c

	[0061.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", dwFileAttributes=0x80) returned 0
	[0061.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3146
	os_tid = 0x3d90

	[0061.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", dwFileAttributes=0x80) returned 0
	[0061.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3147
	os_tid = 0x3d94

	[0061.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL", dwFileAttributes=0x80) returned 0
	[0061.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AEC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\aec.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3148
	os_tid = 0x3d98

	[0061.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL", dwFileAttributes=0x80) returned 0
	[0061.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\AECUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\aecutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3149
	os_tid = 0x3d9c

	[0061.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD", dwFileAttributes=0x80) returned 0
	[0061.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ASSET.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\asset.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3150
	os_tid = 0x3da0

	[0061.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", dwFileAttributes=0x80) returned 0
	[0061.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3151
	os_tid = 0x3da4

	[0061.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", dwFileAttributes=0x80) returned 0
	[0061.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3152
	os_tid = 0x3da8

	[0061.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL", dwFileAttributes=0x80) returned 0
	[0061.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BSTORM.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bstorm.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.584] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3153
	os_tid = 0x3dac

	[0061.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", dwFileAttributes=0x80) returned 0
	[0061.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3154
	os_tid = 0x3db0

	[0061.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD", dwFileAttributes=0x80) returned 0
	[0061.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CALEVENT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\calevent.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3155
	os_tid = 0x3db4

	[0061.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", dwFileAttributes=0x80) returned 0
	[0061.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3156
	os_tid = 0x3db8

	[0061.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn", dwFileAttributes=0x80) returned 0
	[0061.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\collectsignatures_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.665] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3157
	os_tid = 0x3dbc

	[0061.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn", dwFileAttributes=0x80) returned 0
	[0061.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CollectSignatures_Sign.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\collectsignatures_sign.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.666] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3158
	os_tid = 0x3dc0

	[0061.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", dwFileAttributes=0x80) returned 0
	[0061.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.667] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3159
	os_tid = 0x3dc4

	[0061.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", dwFileAttributes=0x80) returned 0
	[0061.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3160
	os_tid = 0x3dc8

	[0061.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", dwFileAttributes=0x80) returned 0
	[0061.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3161
	os_tid = 0x3dcc

	[0061.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", dwFileAttributes=0x80) returned 0
	[0061.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3162
	os_tid = 0x3dd0

	[0061.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", dwFileAttributes=0x80) returned 0
	[0061.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3163
	os_tid = 0x3dd4

	[0061.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL", dwFileAttributes=0x80) returned 0
	[0061.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3164
	os_tid = 0x3dd8

	[0061.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", dwFileAttributes=0x80) returned 0
	[0061.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3165
	os_tid = 0x3ddc

	[0061.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD", dwFileAttributes=0x80) returned 0
	[0061.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DOORSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\doorschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3166
	os_tid = 0x3de0

	[0061.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL", dwFileAttributes=0x80) returned 0
	[0061.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DRILLDWN.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\drilldwn.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3167
	os_tid = 0x3de4

	[0061.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL", dwFileAttributes=0x80) returned 0
	[0061.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DWGCNV.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dwgcnv.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3168
	os_tid = 0x3de8

	[0061.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN", dwFileAttributes=0x80) returned 0
	[0061.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EADOCUMENTAPPROVAL_REVIEW.XSN" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\eadocumentapproval_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3169
	os_tid = 0x3dec

	[0061.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD", dwFileAttributes=0x80) returned 0
	[0061.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EQPLIST.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\eqplist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3170
	os_tid = 0x3df0

	[0061.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", dwFileAttributes=0x80) returned 0
	[0061.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3171
	os_tid = 0x3df4

	[0061.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3172
	os_tid = 0x3df8

	[0061.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3173
	os_tid = 0x3dfc

	[0061.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3174
	os_tid = 0x3e00

	[0061.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3175
	os_tid = 0x3e04

	[0061.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", dwFileAttributes=0x80) returned 0
	[0061.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3176
	os_tid = 0x3e08

	[0061.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL", dwFileAttributes=0x80) returned 0
	[0061.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FACILITY.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\facility.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3177
	os_tid = 0x3e0c

	[0061.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD", dwFileAttributes=0x80) returned 0
	[0061.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FLOCH.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\floch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3178
	os_tid = 0x3e10

	[0061.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", dwFileAttributes=0x80) returned 0
	[0061.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3179
	os_tid = 0x3e14

	[0061.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", dwFileAttributes=0x80) returned 0
	[0061.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3180
	os_tid = 0x3e18

	[0061.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD", dwFileAttributes=0x80) returned 0
	[0061.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3181
	os_tid = 0x3e1c

	[0061.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL", dwFileAttributes=0x80) returned 0
	[0061.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3182
	os_tid = 0x3e20

	[0061.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", dwFileAttributes=0x80) returned 0
	[0061.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3183
	os_tid = 0x3e24

	[0061.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", dwFileAttributes=0x80) returned 0
	[0061.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3184
	os_tid = 0x3e28

	[0061.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3185
	os_tid = 0x3e2c

	[0061.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3186
	os_tid = 0x3e30

	[0061.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.754] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3187
	os_tid = 0x3e34

	[0061.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.755] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3188
	os_tid = 0x3e38

	[0061.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", dwFileAttributes=0x80) returned 0
	[0061.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.755] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3189
	os_tid = 0x3e3c

	[0061.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.756] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3190
	os_tid = 0x3e40

	[0061.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.762] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3191
	os_tid = 0x3e44

	[0061.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.763] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3192
	os_tid = 0x3e48

	[0061.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.764] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3193
	os_tid = 0x3e4c

	[0061.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL", dwFileAttributes=0x80) returned 0
	[0061.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVAC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvac.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3194
	os_tid = 0x3e50

	[0061.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD", dwFileAttributes=0x80) returned 0
	[0061.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDIFF.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvacdiff.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3195
	os_tid = 0x3e54

	[0061.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD", dwFileAttributes=0x80) returned 0
	[0061.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\HVACDUCT.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\hvacduct.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3196
	os_tid = 0x3e58

	[0061.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD", dwFileAttributes=0x80) returned 0
	[0061.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INSTLIST.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\instlist.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3197
	os_tid = 0x3e5c

	[0061.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD", dwFileAttributes=0x80) returned 0
	[0061.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\INVENTRY.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\inventry.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3198
	os_tid = 0x3e60

	[0061.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", dwFileAttributes=0x80) returned 0
	[0061.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.770] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3199
	os_tid = 0x3e64

	[0061.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", dwFileAttributes=0x80) returned 0
	[0061.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.771] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3200
	os_tid = 0x3e68

	[0061.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL", dwFileAttributes=0x80) returned 0
	[0061.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LGND.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lgnd.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.772] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3201
	os_tid = 0x3e6c

	[0061.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", dwFileAttributes=0x80) returned 0
	[0061.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.773] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3202
	os_tid = 0x3e70

	[0061.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", dwFileAttributes=0x80) returned 0
	[0061.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.774] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3203
	os_tid = 0x3e74

	[0061.774] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3204
	os_tid = 0x3e78

	[0061.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.776] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3205
	os_tid = 0x3e7c

	[0061.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.777] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3206
	os_tid = 0x3e80

	[0061.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.778] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3207
	os_tid = 0x3e84

	[0061.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.779] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3208
	os_tid = 0x3e88

	[0061.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3209
	os_tid = 0x3e8c

	[0061.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3210
	os_tid = 0x3e90

	[0061.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3211
	os_tid = 0x3e94

	[0061.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", dwFileAttributes=0x80) returned 0
	[0061.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3212
	os_tid = 0x3e98

	[0061.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3213
	os_tid = 0x3e9c

	[0061.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3214
	os_tid = 0x3ea0

	[0061.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3215
	os_tid = 0x3ea4

	[0061.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3216
	os_tid = 0x3ea8

	[0061.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD", dwFileAttributes=0x80) returned 0
	[0061.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MOVE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\move.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3217
	os_tid = 0x3eac

	[0061.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", dwFileAttributes=0x80) returned 0
	[0061.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3218
	os_tid = 0x3eb0

	[0061.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3219
	os_tid = 0x3eb4

	[0061.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3220
	os_tid = 0x3eb8

	[0061.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3221
	os_tid = 0x3ebc

	[0061.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3222
	os_tid = 0x3ec0

	[0061.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL", dwFileAttributes=0x80) returned 0
	[0061.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3223
	os_tid = 0x3ec4

	[0061.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", dwFileAttributes=0x80) returned 0
	[0061.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3224
	os_tid = 0x3ec8

	[0061.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3225
	os_tid = 0x3ecc

	[0061.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3226
	os_tid = 0x3ed0

	[0061.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3227
	os_tid = 0x3ed4

	[0061.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3228
	os_tid = 0x3ed8

	[0061.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", dwFileAttributes=0x80) returned 0
	[0061.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.839] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3229
	os_tid = 0x3edc

	[0061.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG", dwFileAttributes=0x80) returned 0
	[0061.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.OPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.opg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3230
	os_tid = 0x3ee0

	[0061.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.842] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3231
	os_tid = 0x3ee4

	[0061.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.844] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3232
	os_tid = 0x3ee8

	[0061.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.845] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3233
	os_tid = 0x3eec

	[0061.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.846] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3234
	os_tid = 0x3ef0

	[0061.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", dwFileAttributes=0x80) returned 0
	[0061.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3235
	os_tid = 0x3ef4

	[0061.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", dwFileAttributes=0x80) returned 0
	[0061.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.850] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3236
	os_tid = 0x3ef8

	[0061.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD", dwFileAttributes=0x80) returned 0
	[0061.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK1.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network1.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.851] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3237
	os_tid = 0x3efc

	[0061.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD", dwFileAttributes=0x80) returned 0
	[0061.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK2.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network2.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.853] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3238
	os_tid = 0x3f00

	[0061.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD", dwFileAttributes=0x80) returned 0
	[0061.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK3.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network3.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.854] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3239
	os_tid = 0x3f04

	[0061.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", dwFileAttributes=0x80) returned 0
	[0061.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.855] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3240
	os_tid = 0x3f08

	[0061.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", dwFileAttributes=0x80) returned 0
	[0061.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.856] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3241
	os_tid = 0x3f0c

	[0061.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", dwFileAttributes=0x80) returned 0
	[0061.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.857] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3242
	os_tid = 0x3f10

	[0061.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", dwFileAttributes=0x80) returned 0
	[0061.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3243
	os_tid = 0x3f14

	[0061.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", dwFileAttributes=0x80) returned 0
	[0061.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.859] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3244
	os_tid = 0x3f18

	[0061.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.861] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3245
	os_tid = 0x3f1c

	[0061.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.862] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3246
	os_tid = 0x3f20

	[0061.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.864] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3247
	os_tid = 0x3f24

	[0061.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.933] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3248
	os_tid = 0x3f28

	[0061.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg", dwFileAttributes=0x80) returned 0
	[0061.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONGuide.onepkg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onguide.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.935] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3249
	os_tid = 0x3f2c

	[0061.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD", dwFileAttributes=0x80) returned 0
	[0061.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCH.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgch.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3250
	os_tid = 0x3f30

	[0061.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", dwFileAttributes=0x80) returned 0
	[0061.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3251
	os_tid = 0x3f34

	[0061.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL", dwFileAttributes=0x80) returned 0
	[0061.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3252
	os_tid = 0x3f38

	[0061.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD", dwFileAttributes=0x80) returned 0
	[0061.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGPOS.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgpos.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3253
	os_tid = 0x3f3c

	[0061.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL", dwFileAttributes=0x80) returned 0
	[0061.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGWIZ.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgwiz.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3254
	os_tid = 0x3f40

	[0061.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", dwFileAttributes=0x80) returned 0
	[0061.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3255
	os_tid = 0x3f44

	[0061.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL", dwFileAttributes=0x80) returned 0
	[0061.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HOL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hol"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3256
	os_tid = 0x3f48

	[0061.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", dwFileAttributes=0x80) returned 0
	[0061.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.953] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3257
	os_tid = 0x3f4c

	[0061.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3258
	os_tid = 0x3f50

	[0061.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3259
	os_tid = 0x3f54

	[0061.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.956] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3260
	os_tid = 0x3f58

	[0061.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3261
	os_tid = 0x3f5c

	[0061.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", dwFileAttributes=0x80) returned 0
	[0061.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3262
	os_tid = 0x3f60

	[0061.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", dwFileAttributes=0x80) returned 0
	[0061.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.960] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3263
	os_tid = 0x3f64

	[0061.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", dwFileAttributes=0x80) returned 0
	[0061.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.961] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3264
	os_tid = 0x3f68

	[0061.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL", dwFileAttributes=0x80) returned 0
	[0061.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PE.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pe.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3265
	os_tid = 0x3f6c

	[0061.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD", dwFileAttributes=0x80) returned 0
	[0061.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PIPELINE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pipeline.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3266
	os_tid = 0x3f70

	[0061.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", dwFileAttributes=0x80) returned 0
	[0061.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3267
	os_tid = 0x3f74

	[0061.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC", dwFileAttributes=0x80) returned 0
	[0061.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3268
	os_tid = 0x3f78

	[0061.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT", dwFileAttributes=0x80) returned 0
	[0061.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3269
	os_tid = 0x3f7c

	[0061.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.981] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3270
	os_tid = 0x3f80

	[0061.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0061.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.982] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3271
	os_tid = 0x3f84

	[0061.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", dwFileAttributes=0x80) returned 0
	[0061.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.983] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3272
	os_tid = 0x3f88

	[0061.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", dwFileAttributes=0x80) returned 0
	[0061.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.984] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3273
	os_tid = 0x3f8c

	[0061.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", dwFileAttributes=0x80) returned 0
	[0061.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3274
	os_tid = 0x3f90

	[0061.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL", dwFileAttributes=0x80) returned 0
	[0061.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\proprpt.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.986] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3275
	os_tid = 0x3f94

	[0061.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX", dwFileAttributes=0x80) returned 0
	[0061.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROPRPT.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\proprpt.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.987] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3276
	os_tid = 0x3f98

	[0061.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", dwFileAttributes=0x80) returned 0
	[0061.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.988] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3277
	os_tid = 0x3f9c

	[0061.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", dwFileAttributes=0x80) returned 0
	[0061.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.990] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3278
	os_tid = 0x3fa0

	[0061.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", dwFileAttributes=0x80) returned 0
	[0061.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.991] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3279
	os_tid = 0x3fa4

	[0061.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", dwFileAttributes=0x80) returned 0
	[0061.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.992] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3280
	os_tid = 0x3fa8

	[0061.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", dwFileAttributes=0x80) returned 0
	[0061.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3281
	os_tid = 0x3fac

	[0061.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", dwFileAttributes=0x80) returned 0
	[0061.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.994] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3282
	os_tid = 0x3fb0

	[0061.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", dwFileAttributes=0x80) returned 0
	[0061.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.995] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3283
	os_tid = 0x3fb4

	[0061.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", dwFileAttributes=0x80) returned 0
	[0061.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.996] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3284
	os_tid = 0x3fb8

	[0061.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", dwFileAttributes=0x80) returned 0
	[0061.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.997] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3285
	os_tid = 0x3fbc

	[0061.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", dwFileAttributes=0x80) returned 0
	[0061.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.998] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3286
	os_tid = 0x3fc0

	[0061.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", dwFileAttributes=0x80) returned 0
	[0061.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0061.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3287
	os_tid = 0x3fc4

	[0062.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", dwFileAttributes=0x80) returned 0
	[0062.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.000] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3288
	os_tid = 0x3fc8

	[0062.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", dwFileAttributes=0x80) returned 0
	[0062.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.650] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3289
	os_tid = 0x3fcc

	[0062.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", dwFileAttributes=0x80) returned 0
	[0062.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3290
	os_tid = 0x3fd0

	[0062.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", dwFileAttributes=0x80) returned 0
	[0062.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.652] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3291
	os_tid = 0x3fd4

	[0062.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", dwFileAttributes=0x80) returned 0
	[0062.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.653] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3292
	os_tid = 0x3fd8

	[0062.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", dwFileAttributes=0x80) returned 0
	[0062.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3293
	os_tid = 0x3fdc

	[0062.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", dwFileAttributes=0x80) returned 0
	[0062.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3294
	os_tid = 0x3fe0

	[0062.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", dwFileAttributes=0x80) returned 0
	[0062.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.656] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3295
	os_tid = 0x3fe4

	[0062.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", dwFileAttributes=0x80) returned 0
	[0062.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.657] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3296
	os_tid = 0x3fe8

	[0062.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", dwFileAttributes=0x80) returned 0
	[0062.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.658] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3297
	os_tid = 0x3fec

	[0062.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", dwFileAttributes=0x80) returned 0
	[0062.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.659] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3298
	os_tid = 0x3ff0

	[0062.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", dwFileAttributes=0x80) returned 0
	[0062.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3299
	os_tid = 0x3ff4

	[0062.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", dwFileAttributes=0x80) returned 0
	[0062.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3300
	os_tid = 0x3ff8

	[0062.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", dwFileAttributes=0x80) returned 0
	[0062.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.662] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3301
	os_tid = 0x3ffc

	[0062.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", dwFileAttributes=0x80) returned 0
	[0062.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.663] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3302
	os_tid = 0x3984

	[0062.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", dwFileAttributes=0x80) returned 0
	[0062.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3303
	os_tid = 0x3820

	[0062.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", dwFileAttributes=0x80) returned 0
	[0062.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3304
	os_tid = 0x4004

	[0062.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS", dwFileAttributes=0x80) returned 0
	[0062.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME17.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme17.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3305
	os_tid = 0x4008

	[0062.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS", dwFileAttributes=0x80) returned 0
	[0062.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME18.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme18.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.673] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3306
	os_tid = 0x400c

	[0062.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS", dwFileAttributes=0x80) returned 0
	[0062.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME19.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme19.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.673] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3307
	os_tid = 0x4010

	[0062.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS", dwFileAttributes=0x80) returned 0
	[0062.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME20.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme20.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.674] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3308
	os_tid = 0x4014

	[0062.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS", dwFileAttributes=0x80) returned 0
	[0062.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME21.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme21.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3309
	os_tid = 0x4018

	[0062.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS", dwFileAttributes=0x80) returned 0
	[0062.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME22.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme22.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.676] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3310
	os_tid = 0x401c

	[0062.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS", dwFileAttributes=0x80) returned 0
	[0062.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME23.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme23.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.676] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3311
	os_tid = 0x4020

	[0062.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS", dwFileAttributes=0x80) returned 0
	[0062.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME24.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme24.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3312
	os_tid = 0x4024

	[0062.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS", dwFileAttributes=0x80) returned 0
	[0062.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME25.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme25.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3313
	os_tid = 0x4028

	[0062.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS", dwFileAttributes=0x80) returned 0
	[0062.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME26.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme26.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3314
	os_tid = 0x402c

	[0062.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS", dwFileAttributes=0x80) returned 0
	[0062.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME27.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme27.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3315
	os_tid = 0x4030

	[0062.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS", dwFileAttributes=0x80) returned 0
	[0062.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME28.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme28.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3316
	os_tid = 0x4034

	[0062.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS", dwFileAttributes=0x80) returned 0
	[0062.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME29.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme29.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3317
	os_tid = 0x4038

	[0062.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS", dwFileAttributes=0x80) returned 0
	[0062.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME30.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme30.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3318
	os_tid = 0x403c

	[0062.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS", dwFileAttributes=0x80) returned 0
	[0062.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME31.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme31.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3319
	os_tid = 0x4040

	[0062.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS", dwFileAttributes=0x80) returned 0
	[0062.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME32.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme32.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3320
	os_tid = 0x4044

	[0062.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS", dwFileAttributes=0x80) returned 0
	[0062.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME33.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme33.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3321
	os_tid = 0x4048

	[0062.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS", dwFileAttributes=0x80) returned 0
	[0062.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME34.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme34.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3322
	os_tid = 0x404c

	[0062.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS", dwFileAttributes=0x80) returned 0
	[0062.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME35.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme35.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3323
	os_tid = 0x4050

	[0062.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS", dwFileAttributes=0x80) returned 0
	[0062.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME36.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme36.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3324
	os_tid = 0x4054

	[0062.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS", dwFileAttributes=0x80) returned 0
	[0062.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME37.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme37.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3325
	os_tid = 0x4058

	[0062.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS", dwFileAttributes=0x80) returned 0
	[0062.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME38.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme38.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3326
	os_tid = 0x405c

	[0062.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS", dwFileAttributes=0x80) returned 0
	[0062.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME39.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme39.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3327
	os_tid = 0x4060

	[0062.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS", dwFileAttributes=0x80) returned 0
	[0062.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME40.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme40.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3328
	os_tid = 0x4064

	[0062.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS", dwFileAttributes=0x80) returned 0
	[0062.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME41.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme41.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3329
	os_tid = 0x4068

	[0062.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS", dwFileAttributes=0x80) returned 0
	[0062.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME42.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme42.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3330
	os_tid = 0x406c

	[0062.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS", dwFileAttributes=0x80) returned 0
	[0062.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME43.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme43.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3331
	os_tid = 0x4070

	[0062.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS", dwFileAttributes=0x80) returned 0
	[0062.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME44.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme44.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3332
	os_tid = 0x4074

	[0062.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS", dwFileAttributes=0x80) returned 0
	[0062.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME45.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme45.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3333
	os_tid = 0x4078

	[0062.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS", dwFileAttributes=0x80) returned 0
	[0062.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME46.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme46.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.704] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3334
	os_tid = 0x409c

	[0062.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS", dwFileAttributes=0x80) returned 0
	[0062.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME47.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme47.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.773] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3335
	os_tid = 0x40a0

	[0062.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS", dwFileAttributes=0x80) returned 0
	[0062.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME48.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme48.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.788] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3336
	os_tid = 0x40a4

	[0062.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS", dwFileAttributes=0x80) returned 0
	[0062.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME49.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme49.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.793] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3337
	os_tid = 0x40a8

	[0062.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS", dwFileAttributes=0x80) returned 0
	[0062.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME50.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme50.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3338
	os_tid = 0x40ac

	[0062.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS", dwFileAttributes=0x80) returned 0
	[0062.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME51.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme51.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3339
	os_tid = 0x40b0

	[0062.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS", dwFileAttributes=0x80) returned 0
	[0062.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME52.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme52.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.803] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3340
	os_tid = 0x40b4

	[0062.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS", dwFileAttributes=0x80) returned 0
	[0062.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME53.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme53.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.808] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3341
	os_tid = 0x40b8

	[0062.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS", dwFileAttributes=0x80) returned 0
	[0062.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME54.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme54.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3342
	os_tid = 0x40bc

	[0062.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS", dwFileAttributes=0x80) returned 0
	[0062.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME55.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme55.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3343
	os_tid = 0x40c0

	[0062.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF", dwFileAttributes=0x80) returned 0
	[0062.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3344
	os_tid = 0x40c4

	[0062.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF", dwFileAttributes=0x80) returned 0
	[0062.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3345
	os_tid = 0x40c8

	[0062.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF", dwFileAttributes=0x80) returned 0
	[0062.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3346
	os_tid = 0x40cc

	[0062.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF", dwFileAttributes=0x80) returned 0
	[0062.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3347
	os_tid = 0x40d0

	[0062.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF", dwFileAttributes=0x80) returned 0
	[0062.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3348
	os_tid = 0x40d4

	[0062.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF", dwFileAttributes=0x80) returned 0
	[0062.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3349
	os_tid = 0x40d8

	[0062.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF", dwFileAttributes=0x80) returned 0
	[0062.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3350
	os_tid = 0x40dc

	[0062.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF", dwFileAttributes=0x80) returned 0
	[0062.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3351
	os_tid = 0x40e0

	[0062.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF", dwFileAttributes=0x80) returned 0
	[0062.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3352
	os_tid = 0x40e4

	[0062.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF", dwFileAttributes=0x80) returned 0
	[0062.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3353
	os_tid = 0x40e8

	[0062.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF", dwFileAttributes=0x80) returned 0
	[0062.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3354
	os_tid = 0x40ec

	[0062.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF", dwFileAttributes=0x80) returned 0
	[0062.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3355
	os_tid = 0x40f0

	[0062.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF", dwFileAttributes=0x80) returned 0
	[0062.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3356
	os_tid = 0x40f4

	[0062.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF", dwFileAttributes=0x80) returned 0
	[0062.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3357
	os_tid = 0x40f8

	[0062.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF", dwFileAttributes=0x80) returned 0
	[0062.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3358
	os_tid = 0x40fc

	[0062.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF", dwFileAttributes=0x80) returned 0
	[0062.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3359
	os_tid = 0x4100

	[0062.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF", dwFileAttributes=0x80) returned 0
	[0062.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3360
	os_tid = 0x4104

	[0062.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF", dwFileAttributes=0x80) returned 0
	[0062.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3361
	os_tid = 0x4108

	[0062.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF", dwFileAttributes=0x80) returned 0
	[0062.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3362
	os_tid = 0x410c

	[0062.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF", dwFileAttributes=0x80) returned 0
	[0062.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3363
	os_tid = 0x4110

	[0062.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF", dwFileAttributes=0x80) returned 0
	[0062.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir28b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3364
	os_tid = 0x4114

	[0062.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF", dwFileAttributes=0x80) returned 0
	[0062.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3365
	os_tid = 0x4118

	[0062.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF", dwFileAttributes=0x80) returned 0
	[0062.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir29b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.839] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3366
	os_tid = 0x411c

	[0062.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF", dwFileAttributes=0x80) returned 0
	[0062.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.840] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3367
	os_tid = 0x4120

	[0062.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF", dwFileAttributes=0x80) returned 0
	[0062.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3368
	os_tid = 0x4124

	[0062.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF", dwFileAttributes=0x80) returned 0
	[0062.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.843] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3369
	os_tid = 0x4128

	[0062.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF", dwFileAttributes=0x80) returned 0
	[0062.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir30b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.843] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3370
	os_tid = 0x412c

	[0062.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF", dwFileAttributes=0x80) returned 0
	[0062.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.844] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3371
	os_tid = 0x4130

	[0062.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF", dwFileAttributes=0x80) returned 0
	[0062.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir31b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.845] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3372
	os_tid = 0x4134

	[0062.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF", dwFileAttributes=0x80) returned 0
	[0062.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.987] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3373
	os_tid = 0x4138

	[0062.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF", dwFileAttributes=0x80) returned 0
	[0062.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir32b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.988] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3374
	os_tid = 0x413c

	[0062.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF", dwFileAttributes=0x80) returned 0
	[0062.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.989] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3375
	os_tid = 0x4140

	[0062.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF", dwFileAttributes=0x80) returned 0
	[0062.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir33b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.990] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3376
	os_tid = 0x4144

	[0062.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF", dwFileAttributes=0x80) returned 0
	[0062.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.991] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3377
	os_tid = 0x4148

	[0062.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF", dwFileAttributes=0x80) returned 0
	[0062.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir34b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.992] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3378
	os_tid = 0x414c

	[0062.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF", dwFileAttributes=0x80) returned 0
	[0062.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.992] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3379
	os_tid = 0x4150

	[0062.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF", dwFileAttributes=0x80) returned 0
	[0062.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir35b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3380
	os_tid = 0x4154

	[0063.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF", dwFileAttributes=0x80) returned 0
	[0063.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.001] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3381
	os_tid = 0x4158

	[0063.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF", dwFileAttributes=0x80) returned 0
	[0063.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir36b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.002] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3382
	os_tid = 0x415c

	[0063.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF", dwFileAttributes=0x80) returned 0
	[0063.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.003] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3383
	os_tid = 0x4160

	[0063.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF", dwFileAttributes=0x80) returned 0
	[0063.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.004] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3384
	os_tid = 0x4164

	[0063.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF", dwFileAttributes=0x80) returned 0
	[0063.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.005] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3385
	os_tid = 0x4168

	[0063.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF", dwFileAttributes=0x80) returned 0
	[0063.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.005] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3386
	os_tid = 0x416c

	[0063.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF", dwFileAttributes=0x80) returned 0
	[0063.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.006] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3387
	os_tid = 0x4170

	[0063.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF", dwFileAttributes=0x80) returned 0
	[0063.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.007] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3388
	os_tid = 0x4174

	[0063.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF", dwFileAttributes=0x80) returned 0
	[0063.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.008] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3389
	os_tid = 0x4178

	[0063.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF", dwFileAttributes=0x80) returned 0
	[0063.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.008] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3390
	os_tid = 0x417c

	[0063.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF", dwFileAttributes=0x80) returned 0
	[0063.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.012] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3391
	os_tid = 0x4180

	[0063.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF", dwFileAttributes=0x80) returned 0
	[0063.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.013] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3392
	os_tid = 0x4184

	[0063.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF", dwFileAttributes=0x80) returned 0
	[0063.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.013] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3393
	os_tid = 0x4188

	[0063.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF", dwFileAttributes=0x80) returned 0
	[0063.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.014] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3394
	os_tid = 0x418c

	[0063.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF", dwFileAttributes=0x80) returned 0
	[0063.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.015] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3395
	os_tid = 0x4190

	[0063.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF", dwFileAttributes=0x80) returned 0
	[0063.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.016] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3396
	os_tid = 0x4194

	[0063.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF", dwFileAttributes=0x80) returned 0
	[0063.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.017] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3397
	os_tid = 0x4198

	[0063.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF", dwFileAttributes=0x80) returned 0
	[0063.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.017] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3398
	os_tid = 0x419c

	[0063.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF", dwFileAttributes=0x80) returned 0
	[0063.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.018] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3399
	os_tid = 0x41a0

	[0063.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF", dwFileAttributes=0x80) returned 0
	[0063.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.019] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3400
	os_tid = 0x41a4

	[0063.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF", dwFileAttributes=0x80) returned 0
	[0063.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.020] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3401
	os_tid = 0x41a8

	[0063.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF", dwFileAttributes=0x80) returned 0
	[0063.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3402
	os_tid = 0x41ac

	[0063.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF", dwFileAttributes=0x80) returned 0
	[0063.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3403
	os_tid = 0x41b0

	[0063.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF", dwFileAttributes=0x80) returned 0
	[0063.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.022] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3404
	os_tid = 0x41b4

	[0063.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF", dwFileAttributes=0x80) returned 0
	[0063.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3405
	os_tid = 0x41b8

	[0063.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF", dwFileAttributes=0x80) returned 0
	[0063.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.028] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3406
	os_tid = 0x41bc

	[0063.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF", dwFileAttributes=0x80) returned 0
	[0063.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.029] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3407
	os_tid = 0x41c0

	[0063.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF", dwFileAttributes=0x80) returned 0
	[0063.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.030] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3408
	os_tid = 0x41c4

	[0063.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF", dwFileAttributes=0x80) returned 0
	[0063.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.030] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3409
	os_tid = 0x41c8

	[0063.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF", dwFileAttributes=0x80) returned 0
	[0063.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3410
	os_tid = 0x41cc

	[0063.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF", dwFileAttributes=0x80) returned 0
	[0063.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3411
	os_tid = 0x41d0

	[0063.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF", dwFileAttributes=0x80) returned 0
	[0063.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.033] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3412
	os_tid = 0x41d4

	[0063.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF", dwFileAttributes=0x80) returned 0
	[0063.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.034] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3413
	os_tid = 0x41d8

	[0063.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF", dwFileAttributes=0x80) returned 0
	[0063.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.035] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3414
	os_tid = 0x41dc

	[0063.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF", dwFileAttributes=0x80) returned 0
	[0063.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3415
	os_tid = 0x41e0

	[0063.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF", dwFileAttributes=0x80) returned 0
	[0063.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.037] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3416
	os_tid = 0x41e4

	[0063.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF", dwFileAttributes=0x80) returned 0
	[0063.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3417
	os_tid = 0x41e8

	[0063.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF", dwFileAttributes=0x80) returned 0
	[0063.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.039] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3418
	os_tid = 0x41ec

	[0063.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF", dwFileAttributes=0x80) returned 0
	[0063.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.040] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3419
	os_tid = 0x41f0

	[0063.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF", dwFileAttributes=0x80) returned 0
	[0063.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.108] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3420
	os_tid = 0x41f4

	[0063.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF", dwFileAttributes=0x80) returned 0
	[0063.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\PDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\pdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3421
	os_tid = 0x41f8

	[0063.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF", dwFileAttributes=0x80) returned 0
	[0063.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR00.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir00.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3422
	os_tid = 0x4210

	[0063.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF", dwFileAttributes=0x80) returned 0
	[0063.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR10F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir10f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.318] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3423
	os_tid = 0x4214

	[0063.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF", dwFileAttributes=0x80) returned 0
	[0063.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR11F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir11f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3424
	os_tid = 0x4218

	[0063.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF", dwFileAttributes=0x80) returned 0
	[0063.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR12F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir12f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3425
	os_tid = 0x421c

	[0063.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF", dwFileAttributes=0x80) returned 0
	[0063.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR13F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir13f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3426
	os_tid = 0x4220

	[0063.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF", dwFileAttributes=0x80) returned 0
	[0063.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR14F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir14f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.322] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3427
	os_tid = 0x4224

	[0063.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF", dwFileAttributes=0x80) returned 0
	[0063.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR15F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir15f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3428
	os_tid = 0x4228

	[0063.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF", dwFileAttributes=0x80) returned 0
	[0063.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR16F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir16f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3429
	os_tid = 0x422c

	[0063.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF", dwFileAttributes=0x80) returned 0
	[0063.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR17F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir17f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3430
	os_tid = 0x4230

	[0063.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF", dwFileAttributes=0x80) returned 0
	[0063.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR18F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir18f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3431
	os_tid = 0x4234

	[0063.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF", dwFileAttributes=0x80) returned 0
	[0063.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR19F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir19f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3432
	os_tid = 0x4238

	[0063.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF", dwFileAttributes=0x80) returned 0
	[0063.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir1b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3433
	os_tid = 0x423c

	[0063.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF", dwFileAttributes=0x80) returned 0
	[0063.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR1F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir1f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3434
	os_tid = 0x4240

	[0063.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF", dwFileAttributes=0x80) returned 0
	[0063.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR20F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir20f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3435
	os_tid = 0x4244

	[0063.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF", dwFileAttributes=0x80) returned 0
	[0063.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR21F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir21f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3436
	os_tid = 0x4248

	[0063.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF", dwFileAttributes=0x80) returned 0
	[0063.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR22F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir22f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3437
	os_tid = 0x424c

	[0063.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF", dwFileAttributes=0x80) returned 0
	[0063.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR23F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir23f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3438
	os_tid = 0x4250

	[0063.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF", dwFileAttributes=0x80) returned 0
	[0063.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR24F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir24f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3439
	os_tid = 0x4254

	[0063.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF", dwFileAttributes=0x80) returned 0
	[0063.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR25F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir25f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3440
	os_tid = 0x4258

	[0063.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF", dwFileAttributes=0x80) returned 0
	[0063.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR26F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir26f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.336] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3441
	os_tid = 0x425c

	[0063.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF", dwFileAttributes=0x80) returned 0
	[0063.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR27F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir27f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3442
	os_tid = 0x4260

	[0063.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF", dwFileAttributes=0x80) returned 0
	[0063.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR28F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir28f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3443
	os_tid = 0x4264

	[0063.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF", dwFileAttributes=0x80) returned 0
	[0063.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR29F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir29f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3444
	os_tid = 0x4268

	[0063.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF", dwFileAttributes=0x80) returned 0
	[0063.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir2b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3445
	os_tid = 0x426c

	[0063.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF", dwFileAttributes=0x80) returned 0
	[0063.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR2F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir2f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3446
	os_tid = 0x4270

	[0063.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF", dwFileAttributes=0x80) returned 0
	[0063.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR30F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir30f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3447
	os_tid = 0x4274

	[0063.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF", dwFileAttributes=0x80) returned 0
	[0063.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR31F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir31f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3448
	os_tid = 0x4278

	[0063.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF", dwFileAttributes=0x80) returned 0
	[0063.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR32F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir32f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3449
	os_tid = 0x427c

	[0063.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF", dwFileAttributes=0x80) returned 0
	[0063.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR33F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir33f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3450
	os_tid = 0x4280

	[0063.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF", dwFileAttributes=0x80) returned 0
	[0063.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR34F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir34f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3451
	os_tid = 0x4284

	[0063.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF", dwFileAttributes=0x80) returned 0
	[0063.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR35F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir35f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3452
	os_tid = 0x4288

	[0063.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF", dwFileAttributes=0x80) returned 0
	[0063.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR36F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir36f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3453
	os_tid = 0x428c

	[0063.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF", dwFileAttributes=0x80) returned 0
	[0063.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR37F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir37f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3454
	os_tid = 0x4290

	[0063.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF", dwFileAttributes=0x80) returned 0
	[0063.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR38F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir38f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3455
	os_tid = 0x4294

	[0063.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF", dwFileAttributes=0x80) returned 0
	[0063.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR39F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir39f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.356] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3456
	os_tid = 0x4298

	[0063.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF", dwFileAttributes=0x80) returned 0
	[0063.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir3b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3457
	os_tid = 0x429c

	[0063.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF", dwFileAttributes=0x80) returned 0
	[0063.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR3F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir3f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3458
	os_tid = 0x42a0

	[0063.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF", dwFileAttributes=0x80) returned 0
	[0063.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR40F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir40f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.360] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3459
	os_tid = 0x42a4

	[0063.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF", dwFileAttributes=0x80) returned 0
	[0063.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR41F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir41f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3460
	os_tid = 0x42a8

	[0063.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF", dwFileAttributes=0x80) returned 0
	[0063.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR42F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir42f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3461
	os_tid = 0x42ac

	[0063.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF", dwFileAttributes=0x80) returned 0
	[0063.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir43b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.363] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3462
	os_tid = 0x42b0

	[0063.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF", dwFileAttributes=0x80) returned 0
	[0063.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR43F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir43f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3463
	os_tid = 0x42b4

	[0063.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF", dwFileAttributes=0x80) returned 0
	[0063.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir44b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3464
	os_tid = 0x42b8

	[0063.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF", dwFileAttributes=0x80) returned 0
	[0063.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR44F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir44f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3465
	os_tid = 0x42bc

	[0063.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF", dwFileAttributes=0x80) returned 0
	[0063.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir45b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3466
	os_tid = 0x42c0

	[0063.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF", dwFileAttributes=0x80) returned 0
	[0063.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR45F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir45f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.376] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3467
	os_tid = 0x42c4

	[0063.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF", dwFileAttributes=0x80) returned 0
	[0063.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir46b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.377] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3468
	os_tid = 0x42c8

	[0063.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF", dwFileAttributes=0x80) returned 0
	[0063.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR46F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir46f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3469
	os_tid = 0x42cc

	[0063.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF", dwFileAttributes=0x80) returned 0
	[0063.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir47b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.379] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3470
	os_tid = 0x42d0

	[0063.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF", dwFileAttributes=0x80) returned 0
	[0063.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR47F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir47f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.380] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3471
	os_tid = 0x42d4

	[0063.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF", dwFileAttributes=0x80) returned 0
	[0063.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir48b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3472
	os_tid = 0x42d8

	[0063.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF", dwFileAttributes=0x80) returned 0
	[0063.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR48F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir48f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.388] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3473
	os_tid = 0x42dc

	[0063.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF", dwFileAttributes=0x80) returned 0
	[0063.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir49b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3474
	os_tid = 0x42e0

	[0063.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF", dwFileAttributes=0x80) returned 0
	[0063.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR49F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir49f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3475
	os_tid = 0x42e8

	[0063.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF", dwFileAttributes=0x80) returned 0
	[0063.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir4b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3476
	os_tid = 0x42ec

	[0063.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF", dwFileAttributes=0x80) returned 0
	[0063.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR4F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir4f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.531] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3477
	os_tid = 0x42f0

	[0063.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF", dwFileAttributes=0x80) returned 0
	[0063.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir50b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.537] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3478
	os_tid = 0x42f4

	[0063.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF", dwFileAttributes=0x80) returned 0
	[0063.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR50F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir50f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.543] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3479
	os_tid = 0x42f8

	[0063.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF", dwFileAttributes=0x80) returned 0
	[0063.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir51b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3480
	os_tid = 0x42fc

	[0063.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF", dwFileAttributes=0x80) returned 0
	[0063.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR51F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir51f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.554] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3481
	os_tid = 0x4300

	[0063.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF", dwFileAttributes=0x80) returned 0
	[0063.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir5b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.563] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3482
	os_tid = 0x4304

	[0063.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF", dwFileAttributes=0x80) returned 0
	[0063.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR5F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir5f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3483
	os_tid = 0x4308

	[0063.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF", dwFileAttributes=0x80) returned 0
	[0063.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir6b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3484
	os_tid = 0x430c

	[0063.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF", dwFileAttributes=0x80) returned 0
	[0063.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR6F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir6f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3485
	os_tid = 0x4310

	[0063.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF", dwFileAttributes=0x80) returned 0
	[0063.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir7b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3486
	os_tid = 0x4314

	[0063.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF", dwFileAttributes=0x80) returned 0
	[0063.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR7F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir7f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.594] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3487
	os_tid = 0x4318

	[0063.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF", dwFileAttributes=0x80) returned 0
	[0063.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir8b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3488
	os_tid = 0x431c

	[0063.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF", dwFileAttributes=0x80) returned 0
	[0063.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR8F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir8f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3489
	os_tid = 0x4320

	[0063.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF", dwFileAttributes=0x80) returned 0
	[0063.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9B.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir9b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.611] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3490
	os_tid = 0x4324

	[0063.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF", dwFileAttributes=0x80) returned 0
	[0063.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBSPAPR\\ZPDIR9F.GIF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubspapr\\zpdir9f.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.615] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3491
	os_tid = 0x4328

	[0063.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", dwFileAttributes=0x80) returned 0
	[0063.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.620] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3492
	os_tid = 0x432c

	[0063.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", dwFileAttributes=0x80) returned 0
	[0063.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.624] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3493
	os_tid = 0x4330

	[0063.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", dwFileAttributes=0x80) returned 0
	[0063.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.628] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3494
	os_tid = 0x4334

	[0063.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", dwFileAttributes=0x80) returned 0
	[0063.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.634] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3495
	os_tid = 0x4338

	[0063.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", dwFileAttributes=0x80) returned 0
	[0063.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3496
	os_tid = 0x433c

	[0063.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", dwFileAttributes=0x80) returned 0
	[0063.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3497
	os_tid = 0x4340

	[0063.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", dwFileAttributes=0x80) returned 0
	[0063.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.645] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3498
	os_tid = 0x4344

	[0063.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", dwFileAttributes=0x80) returned 0
	[0063.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.650] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3499
	os_tid = 0x4348

	[0063.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", dwFileAttributes=0x80) returned 0
	[0063.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3500
	os_tid = 0x434c

	[0063.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", dwFileAttributes=0x80) returned 0
	[0063.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.658] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3501
	os_tid = 0x4350

	[0063.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", dwFileAttributes=0x80) returned 0
	[0063.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3502
	os_tid = 0x4354

	[0063.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", dwFileAttributes=0x80) returned 0
	[0063.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3503
	os_tid = 0x4358

	[0063.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", dwFileAttributes=0x80) returned 0
	[0063.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3504
	os_tid = 0x435c

	[0063.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", dwFileAttributes=0x80) returned 0
	[0063.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3505
	os_tid = 0x4360

	[0063.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", dwFileAttributes=0x80) returned 0
	[0063.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3506
	os_tid = 0x4364

	[0063.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", dwFileAttributes=0x80) returned 0
	[0063.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3507
	os_tid = 0x4368

	[0063.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn", dwFileAttributes=0x80) returned 0
	[0063.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\reviewrouting_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3508
	os_tid = 0x436c

	[0063.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn", dwFileAttributes=0x80) returned 0
	[0063.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ReviewRouting_Review.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\reviewrouting_review.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3509
	os_tid = 0x4370

	[0063.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", dwFileAttributes=0x80) returned 0
	[0063.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3510
	os_tid = 0x4374

	[0063.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL", dwFileAttributes=0x80) returned 0
	[0063.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SAVASWEB.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\savasweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3511
	os_tid = 0x4378

	[0063.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", dwFileAttributes=0x80) returned 0
	[0063.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3512
	os_tid = 0x437c

	[0063.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3513
	os_tid = 0x4380

	[0063.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3514
	os_tid = 0x4384

	[0063.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3515
	os_tid = 0x4388

	[0063.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3516
	os_tid = 0x438c

	[0063.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL", dwFileAttributes=0x80) returned 0
	[0063.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SHAPNUM.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\shapnum.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3517
	os_tid = 0x4390

	[0063.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", dwFileAttributes=0x80) returned 0
	[0063.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3518
	os_tid = 0x4394

	[0063.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", dwFileAttributes=0x80) returned 0
	[0063.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3519
	os_tid = 0x4398

	[0063.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", dwFileAttributes=0x80) returned 0
	[0063.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3520
	os_tid = 0x439c

	[0063.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3521
	os_tid = 0x43a0

	[0063.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3522
	os_tid = 0x43a4

	[0063.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3523
	os_tid = 0x43a8

	[0063.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3524
	os_tid = 0x43ac

	[0063.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3525
	os_tid = 0x43b0

	[0063.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3526
	os_tid = 0x43b4

	[0063.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.704] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3527
	os_tid = 0x43b8

	[0063.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.705] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3528
	os_tid = 0x43bc

	[0063.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", dwFileAttributes=0x80) returned 0
	[0063.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.706] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3529
	os_tid = 0x43c0

	[0063.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", dwFileAttributes=0x80) returned 0
	[0063.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.706] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3530
	os_tid = 0x43c4

	[0063.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.707] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3531
	os_tid = 0x43c8

	[0063.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3532
	os_tid = 0x43cc

	[0063.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3533
	os_tid = 0x43d0

	[0063.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3534
	os_tid = 0x43d4

	[0063.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3535
	os_tid = 0x43d8

	[0063.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3536
	os_tid = 0x43dc

	[0063.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3537
	os_tid = 0x43e0

	[0063.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.754] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3538
	os_tid = 0x43e4

	[0063.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD", dwFileAttributes=0x80) returned 0
	[0063.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPACE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\space.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.755] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3539
	os_tid = 0x43e8

	[0063.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", dwFileAttributes=0x80) returned 0
	[0063.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.756] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3540
	os_tid = 0x43ec

	[0063.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", dwFileAttributes=0x80) returned 0
	[0063.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3541
	os_tid = 0x43f0

	[0063.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", dwFileAttributes=0x80) returned 0
	[0063.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.759] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3542
	os_tid = 0x43f4

	[0063.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", dwFileAttributes=0x80) returned 0
	[0063.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.760] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3543
	os_tid = 0x43f8

	[0063.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", dwFileAttributes=0x80) returned 0
	[0063.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.761] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3544
	os_tid = 0x43fc

	[0063.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", dwFileAttributes=0x80) returned 0
	[0063.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.761] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3545
	os_tid = 0xfc4

	[0063.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", dwFileAttributes=0x80) returned 0
	[0063.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.762] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3546
	os_tid = 0xe00

	[0063.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", dwFileAttributes=0x80) returned 0
	[0063.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.763] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3547
	os_tid = 0x6cc

	[0063.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr", dwFileAttributes=0x80) returned 0
	[0063.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeAccess.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeaccess.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.764] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3548
	os_tid = 0xf40

	[0063.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr", dwFileAttributes=0x80) returned 0
	[0063.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeExcel.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeexcel.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3549
	os_tid = 0x4098

	[0063.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr", dwFileAttributes=0x80) returned 0
	[0063.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOneNote.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeonenote.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3550
	os_tid = 0xf60

	[0063.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr", dwFileAttributes=0x80) returned 0
	[0063.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlook.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlook.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3551
	os_tid = 0xf18

	[0063.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr", dwFileAttributes=0x80) returned 0
	[0063.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAddr.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookaddr.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3552
	os_tid = 0xf58

	[0063.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr", dwFileAttributes=0x80) returned 0
	[0063.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookAppt.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookappt.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.768] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3553
	os_tid = 0xf5c

	[0063.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr", dwFileAttributes=0x80) returned 0
	[0063.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMail.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmail.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3554
	os_tid = 0xfb8

	[0063.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr", dwFileAttributes=0x80) returned 0
	[0063.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMailRead.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmailread.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.769] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3555
	os_tid = 0xc70

	[0063.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr", dwFileAttributes=0x80) returned 0
	[0063.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqRead.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmeetingreqread.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.770] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3556
	os_tid = 0x390

	[0063.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr", dwFileAttributes=0x80) returned 0
	[0063.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookMeetingReqSend.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlookmeetingreqsend.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.771] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3557
	os_tid = 0x1a4

	[0063.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr", dwFileAttributes=0x80) returned 0
	[0063.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeOutlookTask.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeoutlooktask.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.772] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3558
	os_tid = 0xf20

	[0063.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr", dwFileAttributes=0x80) returned 0
	[0063.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMePowerPoint.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmepowerpoint.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.776] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3559
	os_tid = 0x4404

	[0063.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr", dwFileAttributes=0x80) returned 0
	[0063.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeProject.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeproject.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.777] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3560
	os_tid = 0x4408

	[0063.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr", dwFileAttributes=0x80) returned 0
	[0063.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeVisio.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmevisio.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.778] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3561
	os_tid = 0x440c

	[0063.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr", dwFileAttributes=0x80) returned 0
	[0063.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TellMeWord.nrr" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\tellmeword.nrr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.779] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3562
	os_tid = 0x4410

	[0063.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", dwFileAttributes=0x80) returned 0
	[0063.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.780] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3563
	os_tid = 0x4414

	[0063.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL", dwFileAttributes=0x80) returned 0
	[0063.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TIMESOLN.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\timesoln.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.781] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3564
	os_tid = 0x4418

	[0063.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD", dwFileAttributes=0x80) returned 0
	[0063.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VALVE.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\valve.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3565
	os_tid = 0x441c

	[0063.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL", dwFileAttributes=0x80) returned 0
	[0063.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISCOLOR.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\viscolor.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3566
	os_tid = 0x4420

	[0063.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", dwFileAttributes=0x80) returned 0
	[0063.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3567
	os_tid = 0x4424

	[0063.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", dwFileAttributes=0x80) returned 0
	[0063.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3568
	os_tid = 0x4428

	[0063.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.787] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3569
	os_tid = 0x442c

	[0063.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3570
	os_tid = 0x4430

	[0063.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.884] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3571
	os_tid = 0x4434

	[0063.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.885] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3572
	os_tid = 0x4438

	[0063.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", dwFileAttributes=0x80) returned 0
	[0063.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3573
	os_tid = 0x443c

	[0063.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3574
	os_tid = 0x4440

	[0063.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.888] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3575
	os_tid = 0x4444

	[0063.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.889] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3576
	os_tid = 0x4448

	[0063.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.890] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3577
	os_tid = 0x444c

	[0063.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", dwFileAttributes=0x80) returned 0
	[0063.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3578
	os_tid = 0x4450

	[0063.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3579
	os_tid = 0x4454

	[0063.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.893] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3580
	os_tid = 0x4458

	[0063.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3581
	os_tid = 0x445c

	[0063.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3582
	os_tid = 0x4460

	[0063.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL", dwFileAttributes=0x80) returned 0
	[0063.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISUTILS.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visutils.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3583
	os_tid = 0x4464

	[0063.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL", dwFileAttributes=0x80) returned 0
	[0063.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISWEB.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visweb.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.901] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3584
	os_tid = 0x4468

	[0063.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", dwFileAttributes=0x80) returned 0
	[0063.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.903] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3585
	os_tid = 0x446c

	[0063.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", dwFileAttributes=0x80) returned 0
	[0063.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3586
	os_tid = 0x4470

	[0063.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.906] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3587
	os_tid = 0x4474

	[0063.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.908] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3588
	os_tid = 0x4478

	[0063.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.909] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3589
	os_tid = 0x447c

	[0063.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.910] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3590
	os_tid = 0x4480

	[0063.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", dwFileAttributes=0x80) returned 0
	[0063.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.912] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3591
	os_tid = 0x4484

	[0063.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.913] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3592
	os_tid = 0x4488

	[0063.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT", dwFileAttributes=0x80) returned 0
	[0063.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.915] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3593
	os_tid = 0x448c

	[0063.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.918] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3594
	os_tid = 0x4490

	[0063.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0063.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.919] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3595
	os_tid = 0x4494

	[0063.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD", dwFileAttributes=0x80) returned 0
	[0063.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINSCHD.VRD" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winschd.vrd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.922] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3596
	os_tid = 0x4498

	[0063.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", dwFileAttributes=0x80) returned 0
	[0063.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.924] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3597
	os_tid = 0x449c

	[0063.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC", dwFileAttributes=0x80) returned 0
	[0063.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_col.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.925] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3598
	os_tid = 0x44b0

	[0064.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT", dwFileAttributes=0x80) returned 0
	[0064.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_COL.HXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_col.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.567] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3599
	os_tid = 0x44b4

	[0064.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK", dwFileAttributes=0x80) returned 0
	[0064.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_F_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_f_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3600
	os_tid = 0x44b8

	[0064.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK", dwFileAttributes=0x80) returned 0
	[0064.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD_K_COL.HXK" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword_k_col.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3601
	os_tid = 0x44bc

	[0064.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL", dwFileAttributes=0x80) returned 0
	[0064.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WORKFLOW.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\workflow.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.570] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3602
	os_tid = 0x44c0

	[0064.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL", dwFileAttributes=0x80) returned 0
	[0064.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XFUNC.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xfunc.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3603
	os_tid = 0x44c4

	[0064.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn", dwFileAttributes=0x80) returned 0
	[0064.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Complete.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlate_complete.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3604
	os_tid = 0x44c8

	[0064.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn", dwFileAttributes=0x80) returned 0
	[0064.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Xlate_Init.xsn" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlate_init.xsn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3605
	os_tid = 0x44cc

	[0064.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", dwFileAttributes=0x80) returned 0
	[0064.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.577] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3606
	os_tid = 0x44d0

	[0064.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL", dwFileAttributes=0x80) returned 0
	[0064.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3607
	os_tid = 0x44d4

	[0064.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL", dwFileAttributes=0x80) returned 0
	[0064.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\MSO.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\mso.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3608
	os_tid = 0x44d8

	[0064.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", dwFileAttributes=0x80) returned 0
	[0064.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3609
	os_tid = 0x44dc

	[0064.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", dwFileAttributes=0x80) returned 0
	[0064.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3610
	os_tid = 0x44e0

	[0064.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", dwFileAttributes=0x80) returned 0
	[0064.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.584] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3611
	os_tid = 0x44e4

	[0064.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU", dwFileAttributes=0x80) returned 0
	[0064.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZDAT12.ACCDU" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzdat12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.588] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3612
	os_tid = 0x44e8

	[0064.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", dwFileAttributes=0x80) returned 0
	[0064.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.591] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3613
	os_tid = 0x44ec

	[0064.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", dwFileAttributes=0x80) returned 0
	[0064.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.597] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3614
	os_tid = 0x44f0

	[0064.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", dwFileAttributes=0x80) returned 0
	[0064.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.602] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3615
	os_tid = 0x44f4

	[0064.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU", dwFileAttributes=0x80) returned 0
	[0064.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZUSR12.ACCDU" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzusr12.accdu"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.608] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3616
	os_tid = 0x44f8

	[0064.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA", dwFileAttributes=0x80) returned 0
	[0064.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\UTILITY.ACCDA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\utility.accda"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.613] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3617
	os_tid = 0x44fc

	[0064.614] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF", dwFileAttributes=0x80) returned 0
	[0064.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\FAXEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\faxext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.615] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3626
	os_tid = 0x4500

	[0064.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", dwFileAttributes=0x80) returned 0
	[0064.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3627
	os_tid = 0x4504

	[0064.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF", dwFileAttributes=0x80) returned 0
	[0064.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSSPC.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msspc.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.669] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3628
	os_tid = 0x4508

	[0064.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF", dwFileAttributes=0x80) returned 0
	[0064.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3629
	os_tid = 0x450c

	[0064.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF", dwFileAttributes=0x80) returned 0
	[0064.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\OUTEX2.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\outex2.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3630
	os_tid = 0x4510

	[0064.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF", dwFileAttributes=0x80) returned 0
	[0064.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PMAILEXT.ECF" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\pmailext.ecf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.673] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3631
	os_tid = 0x4514

	[0064.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap", dwFileAttributes=0x80) returned 0
	[0064.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\PowerViewRes.ar.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\powerviewres.ar.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3632
	os_tid = 0x4518

	[0064.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap", dwFileAttributes=0x80) returned 0
	[0064.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\PowerViewRes.bg.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\powerviewres.bg.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3633
	os_tid = 0x451c

	[0064.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", dwFileAttributes=0x80) returned 0
	[0064.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3634
	os_tid = 0x4520

	[0064.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap", dwFileAttributes=0x80) returned 0
	[0064.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\PowerViewRes.ca.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\powerviewres.ca.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3635
	os_tid = 0x4524

	[0064.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap", dwFileAttributes=0x80) returned 0
	[0064.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\PowerViewRes.cs.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\powerviewres.cs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3636
	os_tid = 0x4528

	[0064.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap", dwFileAttributes=0x80) returned 0
	[0064.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\PowerViewRes.da.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\powerviewres.da.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3637
	os_tid = 0x452c

	[0064.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap", dwFileAttributes=0x80) returned 0
	[0064.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\PowerViewRes.de.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\powerviewres.de.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3638
	os_tid = 0x4530

	[0064.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap", dwFileAttributes=0x80) returned 0
	[0064.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\PowerViewRes.el.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\powerviewres.el.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.713] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3639
	os_tid = 0x4534

	[0064.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap", dwFileAttributes=0x80) returned 0
	[0064.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\PowerViewRes.es.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\powerviewres.es.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3640
	os_tid = 0x4538

	[0064.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap", dwFileAttributes=0x80) returned 0
	[0064.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\PowerViewRes.et.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\powerviewres.et.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3641
	os_tid = 0x453c

	[0064.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap", dwFileAttributes=0x80) returned 0
	[0064.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\PowerViewRes.eu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\powerviewres.eu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.728] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3642
	os_tid = 0x4540

	[0064.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap", dwFileAttributes=0x80) returned 0
	[0064.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\PowerViewRes.fi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\powerviewres.fi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3643
	os_tid = 0x4544

	[0064.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap", dwFileAttributes=0x80) returned 0
	[0064.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\PowerViewRes.fr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\powerviewres.fr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3644
	os_tid = 0x4548

	[0064.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap", dwFileAttributes=0x80) returned 0
	[0064.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\PowerViewRes.gl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\powerviewres.gl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3645
	os_tid = 0x454c

	[0064.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap", dwFileAttributes=0x80) returned 0
	[0064.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\PowerViewRes.he.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\powerviewres.he.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3646
	os_tid = 0x4550

	[0064.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap", dwFileAttributes=0x80) returned 0
	[0064.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\PowerViewRes.hi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\powerviewres.hi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3647
	os_tid = 0x4554

	[0064.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap", dwFileAttributes=0x80) returned 0
	[0064.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\PowerViewRes.hr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\powerviewres.hr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3648
	os_tid = 0x4558

	[0064.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap", dwFileAttributes=0x80) returned 0
	[0064.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\PowerViewRes.hu.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\powerviewres.hu.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.801] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3649
	os_tid = 0x455c

	[0064.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap", dwFileAttributes=0x80) returned 0
	[0064.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\PowerViewRes.id.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\powerviewres.id.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3650
	os_tid = 0x4560

	[0064.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap", dwFileAttributes=0x80) returned 0
	[0064.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\PowerViewRes.it.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\powerviewres.it.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3651
	os_tid = 0x4564

	[0064.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap", dwFileAttributes=0x80) returned 0
	[0064.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\PowerViewRes.ja.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\powerviewres.ja.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3652
	os_tid = 0x4568

	[0064.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap", dwFileAttributes=0x80) returned 0
	[0064.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\PowerViewRes.kk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\powerviewres.kk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3653
	os_tid = 0x456c

	[0064.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap", dwFileAttributes=0x80) returned 0
	[0064.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\PowerViewRes.ko.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\powerviewres.ko.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3654
	os_tid = 0x4570

	[0064.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap", dwFileAttributes=0x80) returned 0
	[0064.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\PowerViewRes.lt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\powerviewres.lt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3655
	os_tid = 0x4574

	[0064.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap", dwFileAttributes=0x80) returned 0
	[0064.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\PowerViewRes.lv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\powerviewres.lv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3656
	os_tid = 0x4578

	[0064.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", dwFileAttributes=0x80) returned 0
	[0064.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\microsoft.reporting.adhoc.shell.bootstrapper.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3657
	os_tid = 0x457c

	[0064.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap", dwFileAttributes=0x80) returned 0
	[0064.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\PowerViewRes.ms.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\powerviewres.ms.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3658
	os_tid = 0x4580

	[0064.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap", dwFileAttributes=0x80) returned 0
	[0064.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\PowerViewRes.nl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\powerviewres.nl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.843] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3659
	os_tid = 0x4584

	[0064.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap", dwFileAttributes=0x80) returned 0
	[0064.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\PowerViewRes.no.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\powerviewres.no.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3660
	os_tid = 0x4588

	[0064.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap", dwFileAttributes=0x80) returned 0
	[0064.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\PowerViewRes.pl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\powerviewres.pl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.852] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3661
	os_tid = 0x458c

	[0064.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap", dwFileAttributes=0x80) returned 0
	[0064.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\PowerViewRes.pt.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\powerviewres.pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.856] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3662
	os_tid = 0x4590

	[0064.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap", dwFileAttributes=0x80) returned 0
	[0064.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\PowerViewRes.pt-PT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\powerviewres.pt-pt.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.860] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3663
	os_tid = 0x4594

	[0064.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap", dwFileAttributes=0x80) returned 0
	[0064.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\PowerViewRes.ro.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\powerviewres.ro.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.865] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3664
	os_tid = 0x4598

	[0064.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap", dwFileAttributes=0x80) returned 0
	[0064.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\PowerViewRes.ru.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\powerviewres.ru.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.869] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3665
	os_tid = 0x459c

	[0064.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap", dwFileAttributes=0x80) returned 0
	[0064.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\PowerViewRes.sk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\powerviewres.sk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3666
	os_tid = 0x45a0

	[0064.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap", dwFileAttributes=0x80) returned 0
	[0064.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\PowerViewRes.sl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\powerviewres.sl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3667
	os_tid = 0x45a4

	[0064.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap", dwFileAttributes=0x80) returned 0
	[0064.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\PowerViewRes.sr-cyrl.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\powerviewres.sr-cyrl.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.883] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3668
	os_tid = 0x45a8

	[0064.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap", dwFileAttributes=0x80) returned 0
	[0064.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\PowerViewRes.sr-latn.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\powerviewres.sr-latn.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3669
	os_tid = 0x45ac

	[0064.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\PowerViewRes.sr-Latn-CS.xap", dwFileAttributes=0x80) returned 0
	[0064.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\PowerViewRes.sr-Latn-CS.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\powerviewres.sr-latn-cs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3670
	os_tid = 0x45b0

	[0064.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap", dwFileAttributes=0x80) returned 0
	[0064.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\PowerViewRes.sv.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\powerviewres.sv.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3671
	os_tid = 0x45b4

	[0064.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap", dwFileAttributes=0x80) returned 0
	[0064.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\PowerViewRes.th.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\powerviewres.th.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3672
	os_tid = 0x45b8

	[0064.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap", dwFileAttributes=0x80) returned 0
	[0064.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\PowerViewRes.tr.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\powerviewres.tr.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.908] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3673
	os_tid = 0x45bc

	[0064.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap", dwFileAttributes=0x80) returned 0
	[0064.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\PowerViewRes.uk.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\powerviewres.uk.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.913] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3674
	os_tid = 0x45c0

	[0064.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap", dwFileAttributes=0x80) returned 0
	[0064.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\PowerViewRes.vi.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\powerviewres.vi.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3675
	os_tid = 0x45c4

	[0064.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap", dwFileAttributes=0x80) returned 0
	[0064.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\PowerViewRes.zh-CHS.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\powerviewres.zh-chs.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.922] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3676
	os_tid = 0x45c8

	[0064.923] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap", dwFileAttributes=0x80) returned 0
	[0064.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\PowerViewRes.zh-CHT.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\powerviewres.zh-cht.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.926] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3677
	os_tid = 0x45cc

	[0064.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0064.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3678
	os_tid = 0x45d0

	[0064.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0064.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3679
	os_tid = 0x45d4

	[0064.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0064.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3680
	os_tid = 0x45d8

	[0064.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0
	[0064.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.943] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3681
	os_tid = 0x45dc

	[0064.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0
	[0064.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3682
	os_tid = 0x45e0

	[0064.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0
	[0064.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3683
	os_tid = 0x45e4

	[0064.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", dwFileAttributes=0x80) returned 0
	[0064.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3684
	os_tid = 0x45e8

	[0064.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", dwFileAttributes=0x80) returned 0
	[0064.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.947] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3685
	os_tid = 0x45ec

	[0064.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0
	[0064.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.947] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3686
	os_tid = 0x45f0

	[0064.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0
	[0064.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.948] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3687
	os_tid = 0x45f4

	[0064.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0
	[0064.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.949] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3688
	os_tid = 0x45f8

	[0064.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0
	[0064.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.950] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3689
	os_tid = 0x45fc

	[0064.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0
	[0064.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0064.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3690
	os_tid = 0x4600

	[0065.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0
	[0065.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3691
	os_tid = 0x4604

	[0065.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", dwFileAttributes=0x80) returned 0
	[0065.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3692
	os_tid = 0x4608

	[0065.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0
	[0065.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3693
	os_tid = 0x460c

	[0065.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3694
	os_tid = 0x4610

	[0065.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3695
	os_tid = 0x4614

	[0065.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.358] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3696
	os_tid = 0x4618

	[0065.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3697
	os_tid = 0x461c

	[0065.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.363] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3698
	os_tid = 0x4620

	[0065.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.368] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3699
	os_tid = 0x4624

	[0065.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.372] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3700
	os_tid = 0x4628

	[0065.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.377] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3701
	os_tid = 0x462c

	[0065.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.381] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3702
	os_tid = 0x4630

	[0065.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3703
	os_tid = 0x4634

	[0065.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3704
	os_tid = 0x4638

	[0065.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3705
	os_tid = 0x463c

	[0065.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3706
	os_tid = 0x4640

	[0065.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3707
	os_tid = 0x4644

	[0065.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3708
	os_tid = 0x4648

	[0065.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3709
	os_tid = 0x464c

	[0065.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\it\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\it\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.437] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3710
	os_tid = 0x4650

	[0065.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ja\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ja\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.442] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3711
	os_tid = 0x4654

	[0065.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\kk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\kk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.447] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3712
	os_tid = 0x4658

	[0065.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ko\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ko\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3713
	os_tid = 0x465c

	[0065.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3714
	os_tid = 0x4660

	[0065.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\lv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\lv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3715
	os_tid = 0x4664

	[0065.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", dwFileAttributes=0x80) returned 0
	[0065.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3716
	os_tid = 0x4668

	[0065.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", dwFileAttributes=0x80) returned 0
	[0065.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.460] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3717
	os_tid = 0x466c

	[0065.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ms\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ms\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3718
	os_tid = 0x4670

	[0065.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\nl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\nl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3719
	os_tid = 0x4674

	[0065.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\no\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\no\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.474] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3720
	os_tid = 0x4678

	[0065.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3721
	os_tid = 0x467c

	[0065.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", dwFileAttributes=0x80) returned 0
	[0065.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.479] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3722
	os_tid = 0x4680

	[0065.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3723
	os_tid = 0x4684

	[0065.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\pt-PT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\pt-pt\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.486] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3724
	os_tid = 0x4688

	[0065.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1025\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1025\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3725
	os_tid = 0x468c

	[0065.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1026\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1026\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3726
	os_tid = 0x4690

	[0065.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\10266\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\10266\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3727
	os_tid = 0x4694

	[0065.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1027\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1027\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.490] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3728
	os_tid = 0x4698

	[0065.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1028\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1028\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3729
	os_tid = 0x469c

	[0065.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1029\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1029\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3730
	os_tid = 0x46a0

	[0065.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1030\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1030\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3731
	os_tid = 0x46a4

	[0065.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1031\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1031\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3732
	os_tid = 0x46a8

	[0065.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1032\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1032\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.547] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3733
	os_tid = 0x46ac

	[0065.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1033\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1033\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3734
	os_tid = 0x46b0

	[0065.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1035\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1035\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3735
	os_tid = 0x46b4

	[0065.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1036\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1036\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.549] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3736
	os_tid = 0x46b8

	[0065.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1037\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1037\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.550] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3737
	os_tid = 0x46bc

	[0065.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1038\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1038\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.551] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3738
	os_tid = 0x46c0

	[0065.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1040\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1040\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3739
	os_tid = 0x46c4

	[0065.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1041\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1041\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.553] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3740
	os_tid = 0x46c8

	[0065.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1042\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1042\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.554] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3741
	os_tid = 0x46cc

	[0065.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1043\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1043\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3742
	os_tid = 0x46d0

	[0065.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1044\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1044\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3743
	os_tid = 0x46d4

	[0065.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1045\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1045\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3744
	os_tid = 0x46d8

	[0065.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1046\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1046\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3745
	os_tid = 0x46dc

	[0065.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1048\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1048\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3746
	os_tid = 0x46e0

	[0065.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1049\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1049\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.558] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3747
	os_tid = 0x46e4

	[0065.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1050\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1050\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.559] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3748
	os_tid = 0x46e8

	[0065.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1051\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1051\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.560] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3749
	os_tid = 0x46ec

	[0065.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1053\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1053\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.561] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3751
	os_tid = 0x46f4

	[0065.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1054\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1054\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3752
	os_tid = 0x46f8

	[0065.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1055\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1055\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3753
	os_tid = 0x46fc

	[0065.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1057\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1057\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.639] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3754
	os_tid = 0x4700

	[0065.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1058\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1058\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.640] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3755
	os_tid = 0x4704

	[0065.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1060\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1060\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3756
	os_tid = 0x4708

	[0065.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1061\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1061\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3757
	os_tid = 0x470c

	[0065.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1062\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1062\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.643] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3758
	os_tid = 0x4710

	[0065.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1063\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1063\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.644] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3759
	os_tid = 0x4714

	[0065.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1066\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1066\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3760
	os_tid = 0x4718

	[0065.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1069\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1069\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3761
	os_tid = 0x471c

	[0065.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1081\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1081\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.648] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3762
	os_tid = 0x4720

	[0065.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1086\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1086\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.649] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3763
	os_tid = 0x4724

	[0065.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1087\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1087\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.650] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3764
	os_tid = 0x4728

	[0065.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\1110\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\1110\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3765
	os_tid = 0x472c

	[0065.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2052\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2052\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.652] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3766
	os_tid = 0x4730

	[0065.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2070\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2070\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.653] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3767
	os_tid = 0x4734

	[0065.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\2074\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\2074\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3768
	os_tid = 0x4738

	[0065.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\3082\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\3082\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3769
	os_tid = 0x473c

	[0065.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll", dwFileAttributes=0x80) returned 0
	[0065.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Resources\\9242\\PowerPivotExcelClientAddIn.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\resources\\9242\\powerpivotexcelclientaddin.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3770
	os_tid = 0x4740

	[0065.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ro\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ro\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3771
	os_tid = 0x4744

	[0065.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ru\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ru\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3772
	os_tid = 0x4748

	[0065.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3773
	os_tid = 0x474c

	[0065.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3774
	os_tid = 0x4750

	[0065.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-cyrl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-cyrl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3775
	os_tid = 0x4754

	[0065.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-latn\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3776
	os_tid = 0x4758

	[0065.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sr-Latn-CS\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sr-latn-cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.853] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3777
	os_tid = 0x475c

	[0065.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\sv\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\sv\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3778
	os_tid = 0x4760

	[0065.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\th\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\th\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.863] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3779
	os_tid = 0x4764

	[0065.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.918] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3780
	os_tid = 0x4768

	[0065.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\uk\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\uk\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3781
	os_tid = 0x476c

	[0065.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\vi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\vi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.923] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3782
	os_tid = 0x4770

	[0065.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHS\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-chs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.929] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3783
	os_tid = 0x4774

	[0065.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml", dwFileAttributes=0x80) returned 0
	[0065.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\zh-CHT\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\zh-cht\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.935] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3784
	os_tid = 0x4778

	[0065.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", dwFileAttributes=0x80) returned 0
	[0065.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3785
	os_tid = 0x477c

	[0065.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", dwFileAttributes=0x80) returned 0
	[0065.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3786
	os_tid = 0x4780

	[0065.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL", dwFileAttributes=0x80) returned 0
	[0065.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2String.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2string.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3787
	os_tid = 0x4784

	[0065.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL", dwFileAttributes=0x80) returned 0
	[0065.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Author2XML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\author2xml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.940] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3788
	os_tid = 0x4788

	[0065.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL", dwFileAttributes=0x80) returned 0
	[0065.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\AUTHOR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\author.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.941] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3789
	os_tid = 0x478c

	[0065.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL", dwFileAttributes=0x80) returned 0
	[0065.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TAG.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\tag.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3790
	os_tid = 0x4790

	[0065.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL", dwFileAttributes=0x80) returned 0
	[0065.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\TITLE.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\title.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.945] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3791
	os_tid = 0x4794

	[0065.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL", dwFileAttributes=0x80) returned 0
	[0065.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Sort\\YEAR.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\sort\\year.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0065.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3792
	os_tid = 0x47a0

	[0066.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0
	[0066.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3793
	os_tid = 0x47a4

	[0066.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL", dwFileAttributes=0x80) returned 0
	[0066.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3794
	os_tid = 0x47a8

	[0066.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL", dwFileAttributes=0x80) returned 0
	[0066.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3795
	os_tid = 0x47ac

	[0066.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL", dwFileAttributes=0x80) returned 0
	[0066.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3796
	os_tid = 0x47b0

	[0066.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL", dwFileAttributes=0x80) returned 0
	[0066.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3797
	os_tid = 0x47b4

	[0066.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", dwFileAttributes=0x80) returned 0
	[0066.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3798
	os_tid = 0x47b8

	[0066.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", dwFileAttributes=0x80) returned 0
	[0066.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3799
	os_tid = 0x47bc

	[0066.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL", dwFileAttributes=0x80) returned 0
	[0066.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.193] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3800
	os_tid = 0x47c0

	[0066.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL", dwFileAttributes=0x80) returned 0
	[0066.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3801
	os_tid = 0x47c4

	[0066.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", dwFileAttributes=0x80) returned 0
	[0066.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.203] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3802
	os_tid = 0x47c8

	[0066.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL", dwFileAttributes=0x80) returned 0
	[0066.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.209] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3803
	os_tid = 0x47cc

	[0066.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL", dwFileAttributes=0x80) returned 0
	[0066.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3804
	os_tid = 0x47d0

	[0066.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR", dwFileAttributes=0x80) returned 0
	[0066.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART1.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart1.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.219] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3805
	os_tid = 0x47d4

	[0066.220] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR", dwFileAttributes=0x80) returned 0
	[0066.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.225] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3806
	os_tid = 0x47d8

	[0066.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR", dwFileAttributes=0x80) returned 0
	[0066.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.230] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3807
	os_tid = 0x47dc

	[0066.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR", dwFileAttributes=0x80) returned 0
	[0066.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART12.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart12.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.235] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3808
	os_tid = 0x47e0

	[0066.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR", dwFileAttributes=0x80) returned 0
	[0066.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART13.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart13.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.240] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3809
	os_tid = 0x47e4

	[0066.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR", dwFileAttributes=0x80) returned 0
	[0066.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART14.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart14.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.246] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3810
	os_tid = 0x47e8

	[0066.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR", dwFileAttributes=0x80) returned 0
	[0066.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART15.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart15.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.250] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3811
	os_tid = 0x47ec

	[0066.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR", dwFileAttributes=0x80) returned 0
	[0066.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART2.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart2.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.256] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3812
	os_tid = 0x47f0

	[0066.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR", dwFileAttributes=0x80) returned 0
	[0066.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART3.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart3.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.261] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3813
	os_tid = 0x47f4

	[0066.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR", dwFileAttributes=0x80) returned 0
	[0066.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.266] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3814
	os_tid = 0x47f8

	[0066.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR", dwFileAttributes=0x80) returned 0
	[0066.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART5.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart5.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.271] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3815
	os_tid = 0x47fc

	[0066.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR", dwFileAttributes=0x80) returned 0
	[0066.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.277] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3816
	os_tid = 0xdc8

	[0066.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR", dwFileAttributes=0x80) returned 0
	[0066.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3817
	os_tid = 0x4804

	[0066.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR", dwFileAttributes=0x80) returned 0
	[0066.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3818
	os_tid = 0x4808

	[0066.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR", dwFileAttributes=0x80) returned 0
	[0066.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\BORDERS\\MSART9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\borders\\msart9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3819
	os_tid = 0x480c

	[0066.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap", dwFileAttributes=0x80) returned 0
	[0066.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CommunicatorContentBinApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\communicatorcontentbinapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3820
	os_tid = 0x4810

	[0066.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt", dwFileAttributes=0x80) returned 0
	[0066.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_expiration_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_expiration_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.299] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3821
	os_tid = 0x4814

	[0066.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt", dwFileAttributes=0x80) returned 0
	[0066.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_security_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_security_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.306] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3822
	os_tid = 0x4818

	[0066.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt", dwFileAttributes=0x80) returned 0
	[0066.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\card_terms_dict.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\card_terms_dict.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3823
	os_tid = 0x481c

	[0066.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml", dwFileAttributes=0x80) returned 0
	[0066.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\config.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\config.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3824
	os_tid = 0x4820

	[0066.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt", dwFileAttributes=0x80) returned 0
	[0066.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Configuration\\ssn_high_group_info.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\configuration\\ssn_high_group_info.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3825
	os_tid = 0x4824

	[0066.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE", dwFileAttributes=0x80) returned 0
	[0066.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\DELIMR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\delimr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3826
	os_tid = 0x4828

	[0066.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE", dwFileAttributes=0x80) returned 0
	[0066.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLADDR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oladdr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3827
	os_tid = 0x482c

	[0066.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE", dwFileAttributes=0x80) returned 0
	[0066.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLAPPTR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olapptr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3828
	os_tid = 0x4830

	[0066.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE", dwFileAttributes=0x80) returned 0
	[0066.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLJRNLR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oljrnlr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3829
	os_tid = 0x4834

	[0066.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE", dwFileAttributes=0x80) returned 0
	[0066.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLMAILR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olmailr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3830
	os_tid = 0x4838

	[0066.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE", dwFileAttributes=0x80) returned 0
	[0066.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLNOTER.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olnoter.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3831
	os_tid = 0x483c

	[0066.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM", dwFileAttributes=0x80) returned 0
	[0066.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLR.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\olr.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3832
	os_tid = 0x4840

	[0066.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE", dwFileAttributes=0x80) returned 0
	[0066.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\1033\\OLTASKR.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\1033\\oltaskr.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.369] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3833
	os_tid = 0x4844

	[0066.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE", dwFileAttributes=0x80) returned 0
	[0066.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DELIMWIN.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\delimwin.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3834
	os_tid = 0x4848

	[0066.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM", dwFileAttributes=0x80) returned 0
	[0066.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\DESKSAM.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\desksam.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.372] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3835
	os_tid = 0x484c

	[0066.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM", dwFileAttributes=0x80) returned 0
	[0066.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OL.SAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\ol.sam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3836
	os_tid = 0x4850

	[0066.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE", dwFileAttributes=0x80) returned 0
	[0066.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLADD.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oladd.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3837
	os_tid = 0x4854

	[0066.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE", dwFileAttributes=0x80) returned 0
	[0066.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLAPPT.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olappt.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.375] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3838
	os_tid = 0x4858

	[0066.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE", dwFileAttributes=0x80) returned 0
	[0066.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLJRNL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oljrnl.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.377] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3839
	os_tid = 0x485c

	[0066.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE", dwFileAttributes=0x80) returned 0
	[0066.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLMAIL.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olmail.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.379] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3840
	os_tid = 0x4860

	[0066.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE", dwFileAttributes=0x80) returned 0
	[0066.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLNOTE.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\olnote.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.381] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3841
	os_tid = 0x4864

	[0066.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE", dwFileAttributes=0x80) returned 0
	[0066.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CONVERT\\OLTASK.FAE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\convert\\oltask.fae"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.383] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3842
	os_tid = 0x4868

	[0066.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc", dwFileAttributes=0x80) returned 0
	[0066.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Custom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\custom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.384] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3843
	os_tid = 0x486c

	[0066.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx", dwFileAttributes=0x80) returned 0
	[0066.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Document Parts\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\document parts\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.385] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3844
	os_tid = 0x4870

	[0066.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL", dwFileAttributes=0x80) returned 0
	[0066.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ELECTRICAL.VSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\electrical.vsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3845
	os_tid = 0x4874

	[0066.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0066.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.387] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3846
	os_tid = 0x4878

	[0066.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap", dwFileAttributes=0x80) returned 0
	[0066.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ExtensibleApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\extensibleapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3847
	os_tid = 0x487c

	[0066.480] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0066.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.481] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3848
	os_tid = 0x4880

	[0066.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO", dwFileAttributes=0x80) returned 0
	[0066.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3849
	os_tid = 0x4884

	[0066.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO", dwFileAttributes=0x80) returned 0
	[0066.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.484] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3850
	os_tid = 0x4888

	[0066.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG", dwFileAttributes=0x80) returned 0
	[0066.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\ACTIVITY.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\activity.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3851
	os_tid = 0x488c

	[0066.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG", dwFileAttributes=0x80) returned 0
	[0066.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.486] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3852
	os_tid = 0x4890

	[0066.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO", dwFileAttributes=0x80) returned 0
	[0066.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\apptl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3853
	os_tid = 0x4894

	[0066.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO", dwFileAttributes=0x80) returned 0
	[0066.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\APPTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\appts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3854
	os_tid = 0x4898

	[0066.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG", dwFileAttributes=0x80) returned 0
	[0066.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.490] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3855
	os_tid = 0x489c

	[0066.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO", dwFileAttributes=0x80) returned 0
	[0066.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFNOT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfnot.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3856
	os_tid = 0x48a0

	[0066.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG", dwFileAttributes=0x80) returned 0
	[0066.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CNFRES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\cnfres.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3857
	os_tid = 0x48a4

	[0066.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO", dwFileAttributes=0x80) returned 0
	[0066.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONFLICT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\conflict.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3858
	os_tid = 0x48a8

	[0066.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG", dwFileAttributes=0x80) returned 0
	[0066.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contact.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.496] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3859
	os_tid = 0x48ac

	[0066.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO", dwFileAttributes=0x80) returned 0
	[0066.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contactl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.497] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3860
	os_tid = 0x48b0

	[0066.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO", dwFileAttributes=0x80) returned 0
	[0066.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\CONTACTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\contacts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3861
	os_tid = 0x48b4

	[0066.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG", dwFileAttributes=0x80) returned 0
	[0066.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLIST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlist.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3862
	os_tid = 0x48b8

	[0066.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO", dwFileAttributes=0x80) returned 0
	[0066.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlstl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3863
	os_tid = 0x48bc

	[0066.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO", dwFileAttributes=0x80) returned 0
	[0066.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DISTLSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\distlsts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3864
	os_tid = 0x48c0

	[0066.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG", dwFileAttributes=0x80) returned 0
	[0066.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\doc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3865
	os_tid = 0x48c4

	[0066.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO", dwFileAttributes=0x80) returned 0
	[0066.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.504] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3866
	os_tid = 0x48c8

	[0066.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO", dwFileAttributes=0x80) returned 0
	[0066.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\DOCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.506] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3867
	os_tid = 0x48cc

	[0066.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG", dwFileAttributes=0x80) returned 0
	[0066.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3868
	os_tid = 0x48d0

	[0066.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO", dwFileAttributes=0x80) returned 0
	[0066.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.509] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3869
	os_tid = 0x48d4

	[0066.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO", dwFileAttributes=0x80) returned 0
	[0066.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\EXITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\exitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.510] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3870
	os_tid = 0x48d8

	[0066.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG", dwFileAttributes=0x80) returned 0
	[0066.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMAIL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infomail.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.512] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3871
	os_tid = 0x48dc

	[0066.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO", dwFileAttributes=0x80) returned 0
	[0066.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3872
	os_tid = 0x48e0

	[0066.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO", dwFileAttributes=0x80) returned 0
	[0066.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\INFOMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\infoms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3873
	os_tid = 0x48e4

	[0066.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG", dwFileAttributes=0x80) returned 0
	[0066.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipm.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3874
	os_tid = 0x48e8

	[0066.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO", dwFileAttributes=0x80) returned 0
	[0066.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3875
	os_tid = 0x48ec

	[0066.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO", dwFileAttributes=0x80) returned 0
	[0066.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\IPMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ipms.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3876
	os_tid = 0x48f0

	[0066.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO", dwFileAttributes=0x80) returned 0
	[0066.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3877
	os_tid = 0x48f4

	[0066.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO", dwFileAttributes=0x80) returned 0
	[0066.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\MMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\mmss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3878
	os_tid = 0x48f8

	[0066.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG", dwFileAttributes=0x80) returned 0
	[0066.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\note.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.587] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3879
	os_tid = 0x48fc

	[0066.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO", dwFileAttributes=0x80) returned 0
	[0066.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.589] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3880
	os_tid = 0x4900

	[0066.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO", dwFileAttributes=0x80) returned 0
	[0066.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\NOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\notes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3881
	os_tid = 0x4904

	[0066.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG", dwFileAttributes=0x80) returned 0
	[0066.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSMMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omsmms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.591] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3882
	os_tid = 0x4908

	[0066.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG", dwFileAttributes=0x80) returned 0
	[0066.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OMSSMS.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\omssms.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.592] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3883
	os_tid = 0x490c

	[0066.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO", dwFileAttributes=0x80) returned 0
	[0066.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.593] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3884
	os_tid = 0x4910

	[0066.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO", dwFileAttributes=0x80) returned 0
	[0066.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\oofs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.595] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3885
	os_tid = 0x4914

	[0066.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG", dwFileAttributes=0x80) returned 0
	[0066.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\OOFTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\ooftmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.596] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3886
	os_tid = 0x4918

	[0066.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG", dwFileAttributes=0x80) returned 0
	[0066.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\post.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.597] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3887
	os_tid = 0x491c

	[0066.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG", dwFileAttributes=0x80) returned 0
	[0066.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTIT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postit.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.599] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3888
	os_tid = 0x4920

	[0066.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO", dwFileAttributes=0x80) returned 0
	[0066.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postitl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.601] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3889
	os_tid = 0x4924

	[0066.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO", dwFileAttributes=0x80) returned 0
	[0066.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTITS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postits.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.602] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3890
	os_tid = 0x4928

	[0066.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO", dwFileAttributes=0x80) returned 0
	[0066.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\postl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.604] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3891
	os_tid = 0x492c

	[0066.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO", dwFileAttributes=0x80) returned 0
	[0066.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\POSTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\posts.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.606] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3892
	os_tid = 0x4930

	[0066.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG", dwFileAttributes=0x80) returned 0
	[0066.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RCLRPT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rclrpt.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3893
	os_tid = 0x4934

	[0066.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG", dwFileAttributes=0x80) returned 0
	[0066.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.609] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3894
	os_tid = 0x4938

	[0066.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO", dwFileAttributes=0x80) returned 0
	[0066.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.610] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3895
	os_tid = 0x493c

	[0066.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO", dwFileAttributes=0x80) returned 0
	[0066.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\recs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.611] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3896
	os_tid = 0x4940

	[0066.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG", dwFileAttributes=0x80) returned 0
	[0066.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remote.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.612] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3897
	os_tid = 0x4944

	[0066.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO", dwFileAttributes=0x80) returned 0
	[0066.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTEL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotel.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.614] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3898
	os_tid = 0x4948

	[0066.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO", dwFileAttributes=0x80) returned 0
	[0066.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REMOTES.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\remotes.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.615] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3899
	os_tid = 0x494c

	[0066.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG", dwFileAttributes=0x80) returned 0
	[0066.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPLTMPL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\repltmpl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.616] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3900
	os_tid = 0x4950

	[0066.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG", dwFileAttributes=0x80) returned 0
	[0066.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORT.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\report.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.618] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3901
	os_tid = 0x4954

	[0066.618] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO", dwFileAttributes=0x80) returned 0
	[0066.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reportl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.619] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3902
	os_tid = 0x4958

	[0066.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO", dwFileAttributes=0x80) returned 0
	[0066.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\REPORTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\reports.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.621] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3903
	os_tid = 0x495c

	[0066.621] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG", dwFileAttributes=0x80) returned 0
	[0066.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESEND.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resend.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.622] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3904
	os_tid = 0x4960

	[0066.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO", dwFileAttributes=0x80) returned 0
	[0066.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resendl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.624] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3905
	os_tid = 0x4964

	[0066.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO", dwFileAttributes=0x80) returned 0
	[0066.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RESENDS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\resends.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3906
	os_tid = 0x4968

	[0066.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG", dwFileAttributes=0x80) returned 0
	[0066.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEM.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitem.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3907
	os_tid = 0x496c

	[0066.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO", dwFileAttributes=0x80) returned 0
	[0066.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEML.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssiteml.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3908
	os_tid = 0x4970

	[0066.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO", dwFileAttributes=0x80) returned 0
	[0066.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\RSSITEMS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\rssitems.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3909
	os_tid = 0x4974

	[0066.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO", dwFileAttributes=0x80) returned 0
	[0066.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncll.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3910
	os_tid = 0x4978

	[0066.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO", dwFileAttributes=0x80) returned 0
	[0066.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDCNCLS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdcncls.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3911
	os_tid = 0x497c

	[0066.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO", dwFileAttributes=0x80) returned 0
	[0066.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3912
	os_tid = 0x4980

	[0066.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO", dwFileAttributes=0x80) returned 0
	[0066.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3913
	os_tid = 0x4984

	[0066.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO", dwFileAttributes=0x80) returned 0
	[0066.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresnl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3914
	os_tid = 0x4988

	[0066.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO", dwFileAttributes=0x80) returned 0
	[0066.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresns.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3915
	os_tid = 0x498c

	[0066.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO", dwFileAttributes=0x80) returned 0
	[0066.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrespl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3916
	os_tid = 0x4990

	[0066.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO", dwFileAttributes=0x80) returned 0
	[0066.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESPS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdresps.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3917
	os_tid = 0x4994

	[0066.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO", dwFileAttributes=0x80) returned 0
	[0066.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrestl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3918
	os_tid = 0x4998

	[0066.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO", dwFileAttributes=0x80) returned 0
	[0066.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCDRESTS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\scdrests.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3919
	os_tid = 0x499c

	[0066.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG", dwFileAttributes=0x80) returned 0
	[0066.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDCNCL.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdcncl.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3920
	os_tid = 0x49a0

	[0066.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG", dwFileAttributes=0x80) returned 0
	[0066.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3921
	os_tid = 0x49a4

	[0066.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG", dwFileAttributes=0x80) returned 0
	[0066.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresn.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3922
	os_tid = 0x49a8

	[0066.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG", dwFileAttributes=0x80) returned 0
	[0066.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDRESP.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdresp.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3923
	os_tid = 0x49ac

	[0066.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG", dwFileAttributes=0x80) returned 0
	[0066.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SCHDREST.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\schdrest.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3924
	os_tid = 0x49b0

	[0066.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG", dwFileAttributes=0x80) returned 0
	[0066.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECREC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3925
	os_tid = 0x49b4

	[0066.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO", dwFileAttributes=0x80) returned 0
	[0066.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3926
	os_tid = 0x49b8

	[0066.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO", dwFileAttributes=0x80) returned 0
	[0066.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECRECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secrecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3927
	os_tid = 0x49bc

	[0066.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG", dwFileAttributes=0x80) returned 0
	[0066.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\secure.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3928
	os_tid = 0x49c0

	[0066.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO", dwFileAttributes=0x80) returned 0
	[0066.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3929
	os_tid = 0x49c4

	[0066.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO", dwFileAttributes=0x80) returned 0
	[0066.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SECURS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\securs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3930
	os_tid = 0x49c8

	[0066.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG", dwFileAttributes=0x80) returned 0
	[0066.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SHARING.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sharing.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3931
	os_tid = 0x49cc

	[0066.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG", dwFileAttributes=0x80) returned 0
	[0066.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGN.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\sign.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3932
	os_tid = 0x49d0

	[0066.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO", dwFileAttributes=0x80) returned 0
	[0066.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3933
	os_tid = 0x49d4

	[0066.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO", dwFileAttributes=0x80) returned 0
	[0066.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SIGNS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\signs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3934
	os_tid = 0x49d8

	[0066.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG", dwFileAttributes=0x80) returned 0
	[0066.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMEE.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimee.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3935
	os_tid = 0x49dc

	[0066.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG", dwFileAttributes=0x80) returned 0
	[0066.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMIMES.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smimes.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3936
	os_tid = 0x49e0

	[0066.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO", dwFileAttributes=0x80) returned 0
	[0066.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smsl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3937
	os_tid = 0x49e4

	[0066.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO", dwFileAttributes=0x80) returned 0
	[0066.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\SMSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\smss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3938
	os_tid = 0x49e8

	[0066.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG", dwFileAttributes=0x80) returned 0
	[0066.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASK.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\task.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3939
	os_tid = 0x49ec

	[0066.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG", dwFileAttributes=0x80) returned 0
	[0066.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskacc.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3940
	os_tid = 0x49f0

	[0066.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO", dwFileAttributes=0x80) returned 0
	[0066.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3941
	os_tid = 0x49f4

	[0066.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO", dwFileAttributes=0x80) returned 0
	[0066.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKACCS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskaccs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3942
	os_tid = 0x49f8

	[0066.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG", dwFileAttributes=0x80) returned 0
	[0066.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDEC.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdec.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3943
	os_tid = 0x49fc

	[0066.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO", dwFileAttributes=0x80) returned 0
	[0066.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3944
	os_tid = 0x4a00

	[0066.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO", dwFileAttributes=0x80) returned 0
	[0066.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKDECS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskdecs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3945
	os_tid = 0x4a04

	[0066.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO", dwFileAttributes=0x80) returned 0
	[0066.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3946
	os_tid = 0x4a08

	[0066.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG", dwFileAttributes=0x80) returned 0
	[0066.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQ.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreq.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3947
	os_tid = 0x4a0c

	[0066.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO", dwFileAttributes=0x80) returned 0
	[0066.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreql.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3948
	os_tid = 0x4a10

	[0066.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO", dwFileAttributes=0x80) returned 0
	[0066.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKREQS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskreqs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3949
	os_tid = 0x4a14

	[0066.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO", dwFileAttributes=0x80) returned 0
	[0066.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\tasks.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3950
	os_tid = 0x4a18

	[0066.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG", dwFileAttributes=0x80) returned 0
	[0066.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FORMS\\1033\\TASKUPD.CFG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\forms\\1033\\taskupd.cfg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3951
	os_tid = 0x4a1c

	[0066.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", dwFileAttributes=0x80) returned 0
	[0066.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.854] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3952
	os_tid = 0x4a20

	[0066.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer", dwFileAttributes=0x80) returned 0
	[0066.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Components\\SignedComponents.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\components\\signedcomponents.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.855] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3953
	os_tid = 0x4a24

	[0066.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer", dwFileAttributes=0x80) returned 0
	[0066.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\ManagedObjects\\SignedManagedObjects.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\managedobjects\\signedmanagedobjects.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.856] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3954
	os_tid = 0x4a28

	[0066.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer", dwFileAttributes=0x80) returned 0
	[0066.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\Management.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\management.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.857] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3955
	os_tid = 0x4a2c

	[0066.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER", dwFileAttributes=0x80) returned 0
	[0066.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\groove.net\\Servers\\RELAY.CER" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\groove.net\\servers\\relay.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3956
	os_tid = 0x4a30

	[0066.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer", dwFileAttributes=0x80) returned 0
	[0066.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Code_Signing_2001-4_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_code_signing_2001-4_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.862] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3957
	os_tid = 0x4a34

	[0066.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer", dwFileAttributes=0x80) returned 0
	[0066.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VeriSign_Class_3_Public_Primary_CA.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\verisign_class_3_public_primary_ca.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.866] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3958
	os_tid = 0x4a38

	[0066.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer", dwFileAttributes=0x80) returned 0
	[0066.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Certificates\\Verisign\\Components\\VS_ComponentSigningIntermediate.cer" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\certificates\\verisign\\components\\vs_componentsigningintermediate.cer"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3959
	os_tid = 0x4a3c

	[0066.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV", dwFileAttributes=0x80) returned 0
	[0066.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\COUGH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\cough.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3960
	os_tid = 0x4a40

	[0066.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV", dwFileAttributes=0x80) returned 0
	[0066.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\GIGGLE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\giggle.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3961
	os_tid = 0x4a44

	[0066.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV", dwFileAttributes=0x80) returned 0
	[0066.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\HICCUP.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\hiccup.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3962
	os_tid = 0x4a48

	[0066.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV", dwFileAttributes=0x80) returned 0
	[0066.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\MMHMM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\mmhmm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3963
	os_tid = 0x4a4c

	[0066.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV", dwFileAttributes=0x80) returned 0
	[0066.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\SNEEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\sneeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.890] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3964
	os_tid = 0x4a50

	[0066.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV", dwFileAttributes=0x80) returned 0
	[0066.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\THROAT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\throat.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3965
	os_tid = 0x4a54

	[0066.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav", dwFileAttributes=0x80) returned 0
	[0066.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\People\\Whistling.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\people\\whistling.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3966
	os_tid = 0x4a58

	[0066.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV", dwFileAttributes=0x80) returned 0
	[0066.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\ALARM.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\alarm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.902] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3967
	os_tid = 0x4a5c

	[0066.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV", dwFileAttributes=0x80) returned 0
	[0066.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\BUZZ.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\buzz.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.905] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3968
	os_tid = 0x4a60

	[0066.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV", dwFileAttributes=0x80) returned 0
	[0066.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.909] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3969
	os_tid = 0x4a64

	[0066.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV", dwFileAttributes=0x80) returned 0
	[0066.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\RADAR.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\radar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.913] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3970
	os_tid = 0x4a68

	[0066.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV", dwFileAttributes=0x80) returned 0
	[0066.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\TOOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\toot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3971
	os_tid = 0x4a6c

	[0066.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV", dwFileAttributes=0x80) returned 0
	[0066.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\VIBE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\vibe.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.921] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3972
	os_tid = 0x4a70

	[0066.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV", dwFileAttributes=0x80) returned 0
	[0066.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Places\\WARN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\places\\warn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.924] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3973
	os_tid = 0x4a74

	[0066.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV", dwFileAttributes=0x80) returned 0
	[0066.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\CAN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\can.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.928] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3974
	os_tid = 0x4a78

	[0066.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV", dwFileAttributes=0x80) returned 0
	[0066.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\COUPLER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\coupler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.932] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3975
	os_tid = 0x4a7c

	[0066.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV", dwFileAttributes=0x80) returned 0
	[0066.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\HORN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\horn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3976
	os_tid = 0x4a80

	[0066.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV", dwFileAttributes=0x80) returned 0
	[0066.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOT.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shot.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.940] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3977
	os_tid = 0x4a84

	[0066.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV", dwFileAttributes=0x80) returned 0
	[0066.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SHOVEL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\shovel.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.945] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3978
	os_tid = 0x4a88

	[0066.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV", dwFileAttributes=0x80) returned 0
	[0066.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\SPLASH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\splash.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.990] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3979
	os_tid = 0x4a8c

	[0066.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0
	[0066.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\Sounds\\Things\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\sounds\\things\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.994] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3980
	os_tid = 0x4a90

	[0066.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg", dwFileAttributes=0x80) returned 0
	[0066.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.995] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3981
	os_tid = 0x4a94

	[0066.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0066.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\DataListIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\datalisticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.997] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3982
	os_tid = 0x4a98

	[0066.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG", dwFileAttributes=0x80) returned 0
	[0066.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIP.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\grip.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.997] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3983
	os_tid = 0x4a9c

	[0066.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP", dwFileAttributes=0x80) returned 0
	[0066.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\GRIPMASK.BMP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\gripmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.998] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3984
	os_tid = 0x4aa0

	[0066.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg", dwFileAttributes=0x80) returned 0
	[0066.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3985
	os_tid = 0x4aa4

	[0067.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\InformationIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\informationiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.000] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3986
	os_tid = 0x4aa8

	[0067.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg", dwFileAttributes=0x80) returned 0
	[0067.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginDialogBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logindialogbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.001] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3987
	os_tid = 0x4aac

	[0067.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg", dwFileAttributes=0x80) returned 0
	[0067.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.004] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3988
	os_tid = 0x4ab0

	[0067.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\LoginTool24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\logintool24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.004] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3989
	os_tid = 0x4ab4

	[0067.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg", dwFileAttributes=0x80) returned 0
	[0067.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.006] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3990
	os_tid = 0x4ab8

	[0067.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageAttachmentIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messageattachmenticonimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.007] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3991
	os_tid = 0x4abc

	[0067.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg", dwFileAttributes=0x80) returned 0
	[0067.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.008] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3992
	os_tid = 0x4ac0

	[0067.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\MessageHistoryIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\messagehistoryiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.009] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3993
	os_tid = 0x4ac4

	[0067.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg", dwFileAttributes=0x80) returned 0
	[0067.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackground.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackground.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.010] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3994
	os_tid = 0x4ac8

	[0067.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg", dwFileAttributes=0x80) returned 0
	[0067.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierBackgroundRTL.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierbackgroundrtl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.011] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3995
	os_tid = 0x4acc

	[0067.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg", dwFileAttributes=0x80) returned 0
	[0067.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierCloseButton.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierclosebutton.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.012] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3996
	os_tid = 0x4ad0

	[0067.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg", dwFileAttributes=0x80) returned 0
	[0067.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisabledownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.013] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3997
	os_tid = 0x4ad4

	[0067.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg", dwFileAttributes=0x80) returned 0
	[0067.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDisableUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdisableuparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.013] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3998
	os_tid = 0x4ad8

	[0067.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg", dwFileAttributes=0x80) returned 0
	[0067.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierDownArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierdownarrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.014] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 3999
	os_tid = 0x4adc

	[0067.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg", dwFileAttributes=0x80) returned 0
	[0067.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierUpArrow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifieruparrow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.016] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4000
	os_tid = 0x4ae0

	[0067.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.017] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4001
	os_tid = 0x4ae4

	[0067.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp", dwFileAttributes=0x80) returned 0
	[0067.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\NotifierWindowMaskRTL.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\notifierwindowmaskrtl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.018] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4002
	os_tid = 0x4ae8

	[0067.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg", dwFileAttributes=0x80) returned 0
	[0067.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.019] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4003
	os_tid = 0x4aec

	[0067.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\OutofSyncIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\outofsynciconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.019] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4004
	os_tid = 0x4af0

	[0067.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg", dwFileAttributes=0x80) returned 0
	[0067.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questionicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4005
	os_tid = 0x4af4

	[0067.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\QuestionIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\questioniconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.022] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4006
	os_tid = 0x4af8

	[0067.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg", dwFileAttributes=0x80) returned 0
	[0067.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.022] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4007
	os_tid = 0x4afc

	[0067.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared16x16ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared16x16imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4008
	os_tid = 0x4b00

	[0067.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg", dwFileAttributes=0x80) returned 0
	[0067.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24Images.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24images.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.024] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4009
	os_tid = 0x4b04

	[0067.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\Shared24x24ImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\shared24x24imagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.025] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4010
	os_tid = 0x4b08

	[0067.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG", dwFileAttributes=0x80) returned 0
	[0067.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\STOPICON.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.244] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4011
	os_tid = 0x4b0c

	[0067.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\StopIconMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\stopiconmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.248] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4012
	os_tid = 0x4b10

	[0067.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp", dwFileAttributes=0x80) returned 0
	[0067.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImages256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\taskbariconimages256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.252] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4013
	os_tid = 0x4b14

	[0067.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp", dwFileAttributes=0x80) returned 0
	[0067.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TaskbarIconImagesMask256Colors.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\taskbariconimagesmask256colors.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.256] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4014
	os_tid = 0x4b18

	[0067.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg", dwFileAttributes=0x80) returned 0
	[0067.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\tipsimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.260] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4015
	os_tid = 0x4b1c

	[0067.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\TipsImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\tipsimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.263] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4016
	os_tid = 0x4b20

	[0067.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg", dwFileAttributes=0x80) returned 0
	[0067.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolBMPs\\VeriSignLogo.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolbmps\\verisignlogo.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.267] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4017
	os_tid = 0x4b24

	[0067.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg", dwFileAttributes=0x80) returned 0
	[0067.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Auto.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_auto.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.271] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4018
	os_tid = 0x4b28

	[0067.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_AutoMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_automask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.274] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4019
	os_tid = 0x4b2c

	[0067.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg", dwFileAttributes=0x80) returned 0
	[0067.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHigh.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.279] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4020
	os_tid = 0x4b30

	[0067.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contacthighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4021
	os_tid = 0x4b34

	[0067.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg", dwFileAttributes=0x80) returned 0
	[0067.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLow.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlow.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4022
	os_tid = 0x4b38

	[0067.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_ContactLowMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_contactlowmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4023
	os_tid = 0x4b3c

	[0067.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg", dwFileAttributes=0x80) returned 0
	[0067.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHigh.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehigh.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4024
	os_tid = 0x4b40

	[0067.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileHighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_filehighmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.298] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4025
	os_tid = 0x4b44

	[0067.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg", dwFileAttributes=0x80) returned 0
	[0067.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOff.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoff.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.302] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4026
	os_tid = 0x4b48

	[0067.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_FileOffMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_fileoffmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4027
	os_tid = 0x4b4c

	[0067.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg", dwFileAttributes=0x80) returned 0
	[0067.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_High.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_high.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4028
	os_tid = 0x4b50

	[0067.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_HighMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_highmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4029
	os_tid = 0x4b54

	[0067.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg", dwFileAttributes=0x80) returned 0
	[0067.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Medium.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_medium.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4030
	os_tid = 0x4b58

	[0067.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp", dwFileAttributes=0x80) returned 0
	[0067.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_MediumMAsk.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_mediummask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4031
	os_tid = 0x4b5c

	[0067.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg", dwFileAttributes=0x80) returned 0
	[0067.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_Off.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_off.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.331] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4032
	os_tid = 0x4b60

	[0067.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\AlertImage_OffMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\alertimage_offmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4033
	os_tid = 0x4b64

	[0067.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg", dwFileAttributes=0x80) returned 0
	[0067.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4034
	os_tid = 0x4b68

	[0067.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4035
	os_tid = 0x4b6c

	[0067.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp", dwFileAttributes=0x80) returned 0
	[0067.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4036
	os_tid = 0x4b70

	[0067.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg", dwFileAttributes=0x80) returned 0
	[0067.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsIncomingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsincomingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4037
	os_tid = 0x4b74

	[0067.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg", dwFileAttributes=0x80) returned 0
	[0067.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImage.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimage.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.358] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4038
	os_tid = 0x4b78

	[0067.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4039
	os_tid = 0x4b7c

	[0067.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp", dwFileAttributes=0x80) returned 0
	[0067.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageMaskSmall.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagemasksmall.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4040
	os_tid = 0x4b80

	[0067.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg", dwFileAttributes=0x80) returned 0
	[0067.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\CommsOutgoingImageSmall.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\commsoutgoingimagesmall.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4041
	os_tid = 0x4b84

	[0067.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg", dwFileAttributes=0x80) returned 0
	[0067.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4042
	os_tid = 0x4b88

	[0067.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\MessageBoxIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\messageboxiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4043
	os_tid = 0x4b8c

	[0067.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg", dwFileAttributes=0x80) returned 0
	[0067.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIcon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadicon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4044
	os_tid = 0x4b90

	[0067.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg", dwFileAttributes=0x80) returned 0
	[0067.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImages.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadiconimages.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4045
	os_tid = 0x4b94

	[0067.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\CommonData\\UnreadIconImagesMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\commondata\\unreadiconimagesmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4046
	os_tid = 0x4b98

	[0067.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg", dwFileAttributes=0x80) returned 0
	[0067.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericon.jpg" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\computericon.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4047
	os_tid = 0x4b9c

	[0067.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp", dwFileAttributes=0x80) returned 0
	[0067.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolData\\groove.net\\Computers\\computericonMask.bmp" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\tooldata\\groove.net\\computers\\computericonmask.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.391] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4048
	os_tid = 0x4ba0

	[0067.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO", dwFileAttributes=0x80) returned 0
	[0067.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ALERT.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\alert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4049
	os_tid = 0x4ba4

	[0067.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO", dwFileAttributes=0x80) returned 0
	[0067.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\CHEVRON.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\chevron.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4050
	os_tid = 0x4ba8

	[0067.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO", dwFileAttributes=0x80) returned 0
	[0067.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\COMPUTER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\computer.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4051
	os_tid = 0x4bac

	[0067.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico", dwFileAttributes=0x80) returned 0
	[0067.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ContactSelector.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\contactselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4052
	os_tid = 0x4bb0

	[0067.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO", dwFileAttributes=0x80) returned 0
	[0067.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\GWE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\gwe.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4053
	os_tid = 0x4bb4

	[0067.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO", dwFileAttributes=0x80) returned 0
	[0067.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INCOMING.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\incoming.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4054
	os_tid = 0x4bb8

	[0067.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO", dwFileAttributes=0x80) returned 0
	[0067.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\INDOMAIN.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\indomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4055
	os_tid = 0x4bbc

	[0067.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO", dwFileAttributes=0x80) returned 0
	[0067.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MAIL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\mail.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4056
	os_tid = 0x4bc0

	[0067.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO", dwFileAttributes=0x80) returned 0
	[0067.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\MANUAL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\manual.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4057
	os_tid = 0x4bc4

	[0067.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico", dwFileAttributes=0x80) returned 0
	[0067.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxalert.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxalert.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4058
	os_tid = 0x4bc8

	[0067.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico", dwFileAttributes=0x80) returned 0
	[0067.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxerror.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxerror.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4059
	os_tid = 0x4bcc

	[0067.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico", dwFileAttributes=0x80) returned 0
	[0067.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\messageboxinfo.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\messageboxinfo.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.442] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4060
	os_tid = 0x4bd0

	[0067.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico", dwFileAttributes=0x80) returned 0
	[0067.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ModifiedTelespace.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\modifiedtelespace.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.446] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4061
	os_tid = 0x4bd4

	[0067.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO", dwFileAttributes=0x80) returned 0
	[0067.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OFFLINE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\offline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4062
	os_tid = 0x4bd8

	[0067.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO", dwFileAttributes=0x80) returned 0
	[0067.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\ONLINE.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\online.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4063
	os_tid = 0x4bdc

	[0067.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico", dwFileAttributes=0x80) returned 0
	[0067.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineBusy.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\onlinebusy.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4064
	os_tid = 0x4be0

	[0067.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico", dwFileAttributes=0x80) returned 0
	[0067.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OnLineIdle.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\onlineidle.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.462] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4065
	os_tid = 0x4be4

	[0067.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico", dwFileAttributes=0x80) returned 0
	[0067.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutDomain.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outdomain.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4066
	os_tid = 0x4be8

	[0067.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO", dwFileAttributes=0x80) returned 0
	[0067.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OUTGOING.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outgoing.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4067
	os_tid = 0x4bec

	[0067.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico", dwFileAttributes=0x80) returned 0
	[0067.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\OutSyncPC.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\outsyncpc.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.475] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4068
	os_tid = 0x4bf0

	[0067.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico", dwFileAttributes=0x80) returned 0
	[0067.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\PersonalContact.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\personalcontact.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4069
	os_tid = 0x4bf4

	[0067.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico", dwFileAttributes=0x80) returned 0
	[0067.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionMember.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\sessionmember.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4070
	os_tid = 0x4bf8

	[0067.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico", dwFileAttributes=0x80) returned 0
	[0067.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SessionOwner.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\sessionowner.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4071
	os_tid = 0x4bfc

	[0067.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico", dwFileAttributes=0x80) returned 0
	[0067.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\SpaceSelector.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\spaceselector.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.492] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4072
	os_tid = 0xcf0

	[0067.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico", dwFileAttributes=0x80) returned 0
	[0067.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusAway.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusaway.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.496] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4073
	os_tid = 0x4c04

	[0067.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico", dwFileAttributes=0x80) returned 0
	[0067.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusDoNotDisturb.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusdonotdisturb.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4074
	os_tid = 0x4c08

	[0067.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico", dwFileAttributes=0x80) returned 0
	[0067.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\StatusOnline.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\statusonline.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.506] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4075
	os_tid = 0x4c0c

	[0067.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO", dwFileAttributes=0x80) returned 0
	[0067.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\TOOLICON.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\toolicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.510] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4076
	os_tid = 0x4c10

	[0067.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO", dwFileAttributes=0x80) returned 0
	[0067.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\wss.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.514] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4077
	os_tid = 0x4c14

	[0067.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico", dwFileAttributes=0x80) returned 0
	[0067.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Groove\\ToolIcons\\WSS_DocLib.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove\\toolicons\\wss_doclib.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.518] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4078
	os_tid = 0x4c18

	[0067.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0067.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.519] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4079
	os_tid = 0x4c1c

	[0067.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", dwFileAttributes=0x80) returned 0
	[0067.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.520] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4080
	os_tid = 0x4c20

	[0067.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss", dwFileAttributes=0x80) returned 0
	[0067.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_resources16.xss" (normalized: "c:\\program files\\microsoft office\\root\\office16\\installed_resources16.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.719] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4081
	os_tid = 0x4c24

	[0067.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss", dwFileAttributes=0x80) returned 0
	[0067.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Installed_schemas16.xss" (normalized: "c:\\program files\\microsoft office\\root\\office16\\installed_schemas16.xss"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4082
	os_tid = 0x4c28

	[0067.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", dwFileAttributes=0x80) returned 0
	[0067.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.721] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4083
	os_tid = 0x4c2c

	[0067.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL", dwFileAttributes=0x80) returned 0
	[0067.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ANALYS32.XLL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\analys32.xll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.724] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4084
	os_tid = 0x4c30

	[0067.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM", dwFileAttributes=0x80) returned 0
	[0067.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\ATPVBAEN.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\atpvbaen.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.728] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4085
	os_tid = 0x4c34

	[0067.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM", dwFileAttributes=0x80) returned 0
	[0067.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\FUNCRES.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\funcres.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4086
	os_tid = 0x4c38

	[0067.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM", dwFileAttributes=0x80) returned 0
	[0067.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\Analysis\\PROCDB.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\analysis\\procdb.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4087
	os_tid = 0x4c3c

	[0067.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM", dwFileAttributes=0x80) returned 0
	[0067.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\EUROTOOL.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\eurotool.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4088
	os_tid = 0x4c40

	[0067.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM", dwFileAttributes=0x80) returned 0
	[0067.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Library\\SOLVER\\SOLVER.XLAM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\library\\solver\\solver.xlam"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4089
	os_tid = 0x4c44

	[0067.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4090
	os_tid = 0x4c48

	[0067.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4091
	os_tid = 0x4c4c

	[0067.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4092
	os_tid = 0x4c50

	[0067.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4093
	os_tid = 0x4c54

	[0067.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4094
	os_tid = 0x4c58

	[0067.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4095
	os_tid = 0x4c5c

	[0067.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4096
	os_tid = 0x4c60

	[0067.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4097
	os_tid = 0x4c64

	[0067.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4098
	os_tid = 0x4c68

	[0067.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4099
	os_tid = 0x4c6c

	[0067.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4100
	os_tid = 0x4c70

	[0067.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4101
	os_tid = 0x4c74

	[0067.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4102
	os_tid = 0x4c78

	[0067.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4103
	os_tid = 0x4c7c

	[0067.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4104
	os_tid = 0x4c80

	[0067.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4105
	os_tid = 0x4c84

	[0067.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4106
	os_tid = 0x4c88

	[0067.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.754] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4107
	os_tid = 0x4c8c

	[0067.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.757] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4108
	os_tid = 0x4c90

	[0067.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4109
	os_tid = 0x4c94

	[0067.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4110
	os_tid = 0x4c98

	[0067.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.759] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4111
	os_tid = 0x4c9c

	[0067.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.760] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4112
	os_tid = 0x4ca0

	[0067.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4113
	os_tid = 0x4ca4

	[0067.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4114
	os_tid = 0x4ca8

	[0067.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4115
	os_tid = 0x4cac

	[0067.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4116
	os_tid = 0x4cb0

	[0067.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4117
	os_tid = 0x4cb4

	[0067.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4118
	os_tid = 0x4cb8

	[0067.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4119
	os_tid = 0x4cbc

	[0067.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4120
	os_tid = 0x4cc0

	[0067.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4121
	os_tid = 0x4cc4

	[0067.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4122
	os_tid = 0x4cc8

	[0067.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4123
	os_tid = 0x4ccc

	[0067.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4124
	os_tid = 0x4cd0

	[0067.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4125
	os_tid = 0x4cd4

	[0067.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4126
	os_tid = 0x4cd8

	[0067.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4127
	os_tid = 0x4cdc

	[0067.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4128
	os_tid = 0x4ce0

	[0067.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4129
	os_tid = 0x4ce4

	[0067.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4130
	os_tid = 0x4ce8

	[0067.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4131
	os_tid = 0x4cec

	[0067.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4132
	os_tid = 0x4cf0

	[0067.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4133
	os_tid = 0x4cf4

	[0067.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4134
	os_tid = 0x4cf8

	[0067.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.839] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4135
	os_tid = 0x4cfc

	[0067.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.840] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4136
	os_tid = 0x4d00

	[0067.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4137
	os_tid = 0x4d04

	[0067.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.876] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4138
	os_tid = 0x4d08

	[0067.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.877] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4139
	os_tid = 0x4d0c

	[0067.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4140
	os_tid = 0x4d10

	[0067.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.879] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4141
	os_tid = 0x4d14

	[0067.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.881] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4142
	os_tid = 0x4d18

	[0067.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4143
	os_tid = 0x4d1c

	[0067.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.883] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4144
	os_tid = 0x4d20

	[0067.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4145
	os_tid = 0x4d24

	[0067.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.888] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4146
	os_tid = 0x4d28

	[0067.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.889] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4147
	os_tid = 0x4d2c

	[0067.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.890] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4148
	os_tid = 0x4d30

	[0067.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4149
	os_tid = 0x4d34

	[0067.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4150
	os_tid = 0x4d38

	[0067.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.893] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4151
	os_tid = 0x4d3c

	[0067.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4152
	os_tid = 0x4d40

	[0067.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.895] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4153
	os_tid = 0x4d44

	[0067.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4154
	os_tid = 0x4d48

	[0067.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4155
	os_tid = 0x4d4c

	[0067.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.899] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4156
	os_tid = 0x4d50

	[0067.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4157
	os_tid = 0x4d54

	[0067.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4158
	os_tid = 0x4d58

	[0067.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4159
	os_tid = 0x4d5c

	[0067.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.974] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4160
	os_tid = 0x4d60

	[0067.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4161
	os_tid = 0x4d64

	[0067.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4162
	os_tid = 0x4d68

	[0067.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.977] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4163
	os_tid = 0x4d6c

	[0067.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4164
	os_tid = 0x4d70

	[0067.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4165
	os_tid = 0x4d74

	[0067.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.981] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4166
	os_tid = 0x4d78

	[0067.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.982] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4167
	os_tid = 0x4d7c

	[0067.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.983] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4168
	os_tid = 0x4d80

	[0067.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.984] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4169
	os_tid = 0x4d84

	[0067.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4170
	os_tid = 0x4d88

	[0067.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.986] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4171
	os_tid = 0x4d8c

	[0067.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.987] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4172
	os_tid = 0x4d90

	[0067.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.988] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4173
	os_tid = 0x4d94

	[0067.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.991] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4174
	os_tid = 0x4d98

	[0067.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.992] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4175
	os_tid = 0x4d9c

	[0067.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4176
	os_tid = 0x4da0

	[0067.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.994] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4177
	os_tid = 0x4da4

	[0067.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.995] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4178
	os_tid = 0x4da8

	[0067.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0067.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.996] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4179
	os_tid = 0x4dac

	[0067.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0067.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.998] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4180
	os_tid = 0x4db0

	[0067.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0067.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0067.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4181
	os_tid = 0x4db4

	[0067.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0067.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.000] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4182
	os_tid = 0x4db8

	[0068.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.001] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4183
	os_tid = 0x4dbc

	[0068.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.002] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4184
	os_tid = 0x4dc0

	[0068.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.003] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4185
	os_tid = 0x4dc4

	[0068.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.004] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4186
	os_tid = 0x4dc8

	[0068.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.006] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4187
	os_tid = 0x4dcc

	[0068.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.007] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4188
	os_tid = 0x4dd0

	[0068.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.008] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4189
	os_tid = 0x4dd4

	[0068.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.056] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4190
	os_tid = 0x4dd8

	[0068.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4191
	os_tid = 0x4ddc

	[0068.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.058] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4192
	os_tid = 0x4de0

	[0068.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4193
	os_tid = 0x4de4

	[0068.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.060] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4194
	os_tid = 0x4de8

	[0068.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4195
	os_tid = 0x4dec

	[0068.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.062] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4196
	os_tid = 0x4df0

	[0068.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.064] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4197
	os_tid = 0x4df4

	[0068.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.065] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4198
	os_tid = 0x4df8

	[0068.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.066] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4199
	os_tid = 0x4dfc

	[0068.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.067] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4200
	os_tid = 0x4e00

	[0068.099] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.099] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4201
	os_tid = 0x4e04

	[0068.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.101] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4202
	os_tid = 0x4e08

	[0068.102] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.102] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4203
	os_tid = 0x4e0c

	[0068.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.103] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4204
	os_tid = 0x4e10

	[0068.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.104] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4205
	os_tid = 0x4e14

	[0068.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4206
	os_tid = 0x4e18

	[0068.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4207
	os_tid = 0x4e1c

	[0068.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.107] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4208
	os_tid = 0x4e20

	[0068.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.108] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4209
	os_tid = 0x4e24

	[0068.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.109] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4210
	os_tid = 0x4e28

	[0068.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.110] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4211
	os_tid = 0x4e2c

	[0068.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.111] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4212
	os_tid = 0x4e30

	[0068.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4213
	os_tid = 0x4e34

	[0068.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.114] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4214
	os_tid = 0x4e38

	[0068.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.115] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4215
	os_tid = 0x4e3c

	[0068.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4216
	os_tid = 0x4e40

	[0068.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4217
	os_tid = 0x4e44

	[0068.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4218
	os_tid = 0x4e48

	[0068.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.118] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4219
	os_tid = 0x4e4c

	[0068.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.119] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4220
	os_tid = 0x4e50

	[0068.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.120] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4221
	os_tid = 0x4e54

	[0068.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.121] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4222
	os_tid = 0x4e58

	[0068.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.122] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4223
	os_tid = 0x4e5c

	[0068.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4224
	os_tid = 0x4e60

	[0068.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4225
	os_tid = 0x4e64

	[0068.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4226
	os_tid = 0x4e68

	[0068.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4227
	os_tid = 0x4e6c

	[0068.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4228
	os_tid = 0x4e70

	[0068.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4229
	os_tid = 0x4e74

	[0068.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4230
	os_tid = 0x4e78

	[0068.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4231
	os_tid = 0x4e7c

	[0068.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4232
	os_tid = 0x4e80

	[0068.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4233
	os_tid = 0x4e84

	[0068.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4234
	os_tid = 0x4e88

	[0068.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4235
	os_tid = 0x4e8c

	[0068.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4236
	os_tid = 0x4e90

	[0068.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4237
	os_tid = 0x4e94

	[0068.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4238
	os_tid = 0x4e98

	[0068.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4239
	os_tid = 0x4e9c

	[0068.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4240
	os_tid = 0x4ea0

	[0068.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4241
	os_tid = 0x4ea4

	[0068.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4242
	os_tid = 0x4ea8

	[0068.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4243
	os_tid = 0x4eac

	[0068.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4244
	os_tid = 0x4eb0

	[0068.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4245
	os_tid = 0x4eb4

	[0068.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4246
	os_tid = 0x4eb8

	[0068.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4247
	os_tid = 0x4ebc

	[0068.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4248
	os_tid = 0x4ec0

	[0068.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4249
	os_tid = 0x4ec4

	[0068.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4250
	os_tid = 0x4ec8

	[0068.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4251
	os_tid = 0x4ecc

	[0068.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4252
	os_tid = 0x4ed0

	[0068.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4253
	os_tid = 0x4ed4

	[0068.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4254
	os_tid = 0x4ed8

	[0068.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4255
	os_tid = 0x4edc

	[0068.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4256
	os_tid = 0x4ee0

	[0068.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4257
	os_tid = 0x4ee4

	[0068.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4258
	os_tid = 0x4ee8

	[0068.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4259
	os_tid = 0x4eec

	[0068.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.248] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4260
	os_tid = 0x4ef0

	[0068.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.252] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4261
	os_tid = 0x4ef4

	[0068.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.299] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4262
	os_tid = 0x4ef8

	[0068.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4263
	os_tid = 0x4efc

	[0068.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4264
	os_tid = 0x4f00

	[0068.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.322] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4265
	os_tid = 0x4f04

	[0068.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.324] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4266
	os_tid = 0x4f08

	[0068.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4267
	os_tid = 0x4f0c

	[0068.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4268
	os_tid = 0x4f10

	[0068.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4269
	os_tid = 0x4f14

	[0068.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.332] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4270
	os_tid = 0x4f18

	[0068.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4271
	os_tid = 0x4f1c

	[0068.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4272
	os_tid = 0x4f20

	[0068.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4273
	os_tid = 0x4f24

	[0068.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.336] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4274
	os_tid = 0x4f28

	[0068.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4275
	os_tid = 0x4f2c

	[0068.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4276
	os_tid = 0x4f30

	[0068.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4277
	os_tid = 0x4f34

	[0068.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4278
	os_tid = 0x4f38

	[0068.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4279
	os_tid = 0x4f3c

	[0068.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4280
	os_tid = 0x4f40

	[0068.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\PowerPntLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\powerpntlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4281
	os_tid = 0x4f44

	[0068.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4282
	os_tid = 0x4f48

	[0068.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4283
	os_tid = 0x4f4c

	[0068.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4284
	os_tid = 0x4f50

	[0068.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4285
	os_tid = 0x4f54

	[0068.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4286
	os_tid = 0x4f58

	[0068.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4287
	os_tid = 0x4f5c

	[0068.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.349] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4288
	os_tid = 0x4f60

	[0068.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4289
	os_tid = 0x4f64

	[0068.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.351] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4290
	os_tid = 0x4f68

	[0068.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4291
	os_tid = 0x4f6c

	[0068.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.353] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4292
	os_tid = 0x4f70

	[0068.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4293
	os_tid = 0x4f74

	[0068.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.355] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4294
	os_tid = 0x4f78

	[0068.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.356] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4295
	os_tid = 0x4f7c

	[0068.356] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4296
	os_tid = 0x4f80

	[0068.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4297
	os_tid = 0x4f84

	[0068.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4298
	os_tid = 0x4f88

	[0068.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4299
	os_tid = 0x4f8c

	[0068.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4300
	os_tid = 0x4f90

	[0068.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.415] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4301
	os_tid = 0x4f94

	[0068.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4302
	os_tid = 0x4f98

	[0068.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.417] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4303
	os_tid = 0x4f9c

	[0068.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4304
	os_tid = 0x4fa0

	[0068.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\VisioLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\visiologosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4305
	os_tid = 0x4fa4

	[0068.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4306
	os_tid = 0x4fa8

	[0068.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4307
	os_tid = 0x4fac

	[0068.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4308
	os_tid = 0x4fb0

	[0068.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.422] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4309
	os_tid = 0x4fb4

	[0068.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4310
	os_tid = 0x4fb8

	[0068.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4311
	os_tid = 0x4fbc

	[0068.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4312
	os_tid = 0x4fc0

	[0068.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4313
	os_tid = 0x4fc4

	[0068.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4314
	os_tid = 0x4fc8

	[0068.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4315
	os_tid = 0x4fcc

	[0068.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4316
	os_tid = 0x4fd0

	[0068.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4317
	os_tid = 0x4fd4

	[0068.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4318
	os_tid = 0x4fd8

	[0068.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4319
	os_tid = 0x4fdc

	[0068.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.432] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4320
	os_tid = 0x4fe0

	[0068.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4321
	os_tid = 0x4fe4

	[0068.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4322
	os_tid = 0x4fe8

	[0068.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.435] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4323
	os_tid = 0x4fec

	[0068.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.436] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4324
	os_tid = 0x4ff0

	[0068.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.437] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4325
	os_tid = 0x4ff4

	[0068.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4326
	os_tid = 0x4ff8

	[0068.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.439] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4327
	os_tid = 0x4ffc

	[0068.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.440] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4328
	os_tid = 0xd18

	[0068.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinProjLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winprojlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.441] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4329
	os_tid = 0xe94

	[0068.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.442] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4330
	os_tid = 0xcc4

	[0068.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4331
	os_tid = 0xef0

	[0068.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4332
	os_tid = 0xa6c

	[0068.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.444] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4333
	os_tid = 0xe0

	[0068.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.445] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4334
	os_tid = 0xd6c

	[0068.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.446] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4335
	os_tid = 0x4c8

	[0068.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.447] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4336
	os_tid = 0x474

	[0068.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.448] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4337
	os_tid = 0xb80

	[0068.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.449] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4338
	os_tid = 0xfc0

	[0068.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4339
	os_tid = 0xc04

	[0068.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4340
	os_tid = 0x544

	[0068.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogo.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.451] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4341
	os_tid = 0x744

	[0068.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.452] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4342
	os_tid = 0x5004

	[0068.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.453] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4343
	os_tid = 0x5008

	[0068.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4344
	os_tid = 0x500c

	[0068.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.457] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4345
	os_tid = 0x5010

	[0068.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4346
	os_tid = 0x5014

	[0068.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4347
	os_tid = 0x5018

	[0068.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.512] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4348
	os_tid = 0x501c

	[0068.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.516] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4349
	os_tid = 0x5020

	[0068.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-100.png", dwFileAttributes=0x80) returned 0
	[0068.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.scale-100.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.520] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4350
	os_tid = 0x5024

	[0068.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-140.png", dwFileAttributes=0x80) returned 0
	[0068.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.524] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4351
	os_tid = 0x5028

	[0068.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-180.png", dwFileAttributes=0x80) returned 0
	[0068.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.529] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4352
	os_tid = 0x502c

	[0068.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-80.png", dwFileAttributes=0x80) returned 0
	[0068.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\WinWordLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\winwordlogosmall.scale-80.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.533] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4353
	os_tid = 0x5030

	[0068.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", dwFileAttributes=0x80) returned 0
	[0068.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.534] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4354
	os_tid = 0x5034

	[0068.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", dwFileAttributes=0x80) returned 0
	[0068.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.535] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4355
	os_tid = 0x5038

	[0068.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", dwFileAttributes=0x80) returned 0
	[0068.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.537] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4356
	os_tid = 0x503c

	[0068.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", dwFileAttributes=0x80) returned 0
	[0068.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.537] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4357
	os_tid = 0x5040

	[0068.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV", dwFileAttributes=0x80) returned 0
	[0068.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\APPLAUSE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\applause.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.547] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4358
	os_tid = 0x5044

	[0068.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV", dwFileAttributes=0x80) returned 0
	[0068.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\ARROW.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\arrow.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4359
	os_tid = 0x5048

	[0068.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV", dwFileAttributes=0x80) returned 0
	[0068.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BOMB.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\bomb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.550] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4360
	os_tid = 0x504c

	[0068.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV", dwFileAttributes=0x80) returned 0
	[0068.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\BREEZE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\breeze.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.551] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4361
	os_tid = 0x5050

	[0068.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV", dwFileAttributes=0x80) returned 0
	[0068.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CAMERA.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\camera.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4362
	os_tid = 0x5054

	[0068.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV", dwFileAttributes=0x80) returned 0
	[0068.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CASHREG.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\cashreg.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.553] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4363
	os_tid = 0x5058

	[0068.554] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV", dwFileAttributes=0x80) returned 0
	[0068.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CHIMES.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\chimes.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.554] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4364
	os_tid = 0x505c

	[0068.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV", dwFileAttributes=0x80) returned 0
	[0068.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\CLICK.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\click.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4365
	os_tid = 0x5060

	[0068.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV", dwFileAttributes=0x80) returned 0
	[0068.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\COIN.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\coin.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4366
	os_tid = 0x5064

	[0068.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma", dwFileAttributes=0x80) returned 0
	[0068.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DefaultHold.wma" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\defaulthold.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4367
	os_tid = 0x5068

	[0068.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV", dwFileAttributes=0x80) returned 0
	[0068.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\DRUMROLL.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\drumroll.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.558] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4368
	os_tid = 0x506c

	[0068.559] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV", dwFileAttributes=0x80) returned 0
	[0068.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\EXPLODE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\explode.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.560] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4369
	os_tid = 0x5070

	[0068.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV", dwFileAttributes=0x80) returned 0
	[0068.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\HAMMER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\hammer.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.561] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4370
	os_tid = 0x5074

	[0068.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV", dwFileAttributes=0x80) returned 0
	[0068.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LASER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\laser.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4371
	os_tid = 0x5078

	[0068.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav", dwFileAttributes=0x80) returned 0
	[0068.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_abbrdialtone.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_abbrdialtone.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.563] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4372
	os_tid = 0x507c

	[0068.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav", dwFileAttributes=0x80) returned 0
	[0068.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ActivePresenterChange.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_activepresenterchange.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.565] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4373
	os_tid = 0x5080

	[0068.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav", dwFileAttributes=0x80) returned 0
	[0068.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_appinvite.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_appinvite.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.565] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4374
	os_tid = 0x5084

	[0068.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav", dwFileAttributes=0x80) returned 0
	[0068.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_busy.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_busy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4375
	os_tid = 0x5088

	[0068.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav", dwFileAttributes=0x80) returned 0
	[0068.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_callended.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_callended.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.567] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4376
	os_tid = 0x508c

	[0068.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav", dwFileAttributes=0x80) returned 0
	[0068.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ChangeModality.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_changemodality.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4377
	os_tid = 0x5090

	[0068.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav", dwFileAttributes=0x80) returned 0
	[0068.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_connecting.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_connecting.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4378
	os_tid = 0x5094

	[0068.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav", dwFileAttributes=0x80) returned 0
	[0068.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dialtone.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dialtone.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.570] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4379
	os_tid = 0x5098

	[0068.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav", dwFileAttributes=0x80) returned 0
	[0068.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf0.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf0.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.572] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4380
	os_tid = 0x509c

	[0068.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav", dwFileAttributes=0x80) returned 0
	[0068.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf1.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4381
	os_tid = 0x50a0

	[0068.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav", dwFileAttributes=0x80) returned 0
	[0068.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf2.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.574] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4382
	os_tid = 0x50a4

	[0068.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav", dwFileAttributes=0x80) returned 0
	[0068.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf3.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.574] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4383
	os_tid = 0x50a8

	[0068.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav", dwFileAttributes=0x80) returned 0
	[0068.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf4.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4384
	os_tid = 0x50ac

	[0068.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav", dwFileAttributes=0x80) returned 0
	[0068.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf5.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4385
	os_tid = 0x50b0

	[0068.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav", dwFileAttributes=0x80) returned 0
	[0068.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf6.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.577] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4386
	os_tid = 0x50b4

	[0068.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav", dwFileAttributes=0x80) returned 0
	[0068.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf7.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4387
	os_tid = 0x50b8

	[0068.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav", dwFileAttributes=0x80) returned 0
	[0068.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf8.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf8.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4388
	os_tid = 0x50bc

	[0068.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav", dwFileAttributes=0x80) returned 0
	[0068.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmf9.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmf9.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4389
	os_tid = 0x50c0

	[0068.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav", dwFileAttributes=0x80) returned 0
	[0068.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfpound.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmfpound.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4390
	os_tid = 0x50c4

	[0068.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav", dwFileAttributes=0x80) returned 0
	[0068.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_dtmfstar.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_dtmfstar.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4391
	os_tid = 0x50c8

	[0068.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav", dwFileAttributes=0x80) returned 0
	[0068.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fastbusy.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_fastbusy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4392
	os_tid = 0x50cc

	[0068.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav", dwFileAttributes=0x80) returned 0
	[0068.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_fsringing.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_fsringing.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4393
	os_tid = 0x50d0

	[0068.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav", dwFileAttributes=0x80) returned 0
	[0068.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_howler.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_howler.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4394
	os_tid = 0x50d4

	[0068.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav", dwFileAttributes=0x80) returned 0
	[0068.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_iminvite.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_iminvite.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.707] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4395
	os_tid = 0x50d8

	[0068.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav", dwFileAttributes=0x80) returned 0
	[0068.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_joinedconference.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_joinedconference.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.711] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4396
	os_tid = 0x50dc

	[0068.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav", dwFileAttributes=0x80) returned 0
	[0068.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_muting.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_muting.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4397
	os_tid = 0x50e0

	[0068.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav", dwFileAttributes=0x80) returned 0
	[0068.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_newim.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_newim.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4398
	os_tid = 0x50e4

	[0068.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav", dwFileAttributes=0x80) returned 0
	[0068.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_onhold.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_onhold.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.725] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4399
	os_tid = 0x50e8

	[0068.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav", dwFileAttributes=0x80) returned 0
	[0068.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_presence.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_presence.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4400
	os_tid = 0x50ec

	[0068.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav", dwFileAttributes=0x80) returned 0
	[0068.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_redirect.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_redirect.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4401
	os_tid = 0x50f0

	[0068.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav", dwFileAttributes=0x80) returned 0
	[0068.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringback.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringback.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4402
	os_tid = 0x50f4

	[0068.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav", dwFileAttributes=0x80) returned 0
	[0068.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringing.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringing.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4403
	os_tid = 0x50f8

	[0068.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav", dwFileAttributes=0x80) returned 0
	[0068.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone2.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4404
	os_tid = 0x50fc

	[0068.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav", dwFileAttributes=0x80) returned 0
	[0068.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone3.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4405
	os_tid = 0x5100

	[0068.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav", dwFileAttributes=0x80) returned 0
	[0068.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone4.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4406
	os_tid = 0x5104

	[0068.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav", dwFileAttributes=0x80) returned 0
	[0068.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone5.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.763] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4407
	os_tid = 0x5108

	[0068.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav", dwFileAttributes=0x80) returned 0
	[0068.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone6.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.768] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4408
	os_tid = 0x510c

	[0068.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav", dwFileAttributes=0x80) returned 0
	[0068.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_ringtone7.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_ringtone7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.772] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4409
	os_tid = 0x5110

	[0068.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav", dwFileAttributes=0x80) returned 0
	[0068.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_secondcall.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_secondcall.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.777] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4410
	os_tid = 0x5114

	[0068.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav", dwFileAttributes=0x80) returned 0
	[0068.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_untag.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_untag.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4411
	os_tid = 0x5118

	[0068.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav", dwFileAttributes=0x80) returned 0
	[0068.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videoadded.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_videoadded.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4412
	os_tid = 0x511c

	[0068.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav", dwFileAttributes=0x80) returned 0
	[0068.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\LYNC_videocall.wav" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\lync_videocall.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.791] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4413
	os_tid = 0x5120

	[0068.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV", dwFileAttributes=0x80) returned 0
	[0068.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\PUSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\push.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4414
	os_tid = 0x5124

	[0068.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV", dwFileAttributes=0x80) returned 0
	[0068.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\SUCTION.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\suction.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.799] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4415
	os_tid = 0x5128

	[0068.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV", dwFileAttributes=0x80) returned 0
	[0068.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\TYPE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\type.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.803] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4416
	os_tid = 0x512c

	[0068.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV", dwFileAttributes=0x80) returned 0
	[0068.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\VOLTAGE.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\voltage.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.807] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4417
	os_tid = 0x5130

	[0068.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV", dwFileAttributes=0x80) returned 0
	[0068.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WHOOSH.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\whoosh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4418
	os_tid = 0x5134

	[0068.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV", dwFileAttributes=0x80) returned 0
	[0068.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\WIND.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\media\\wind.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4419
	os_tid = 0x5138

	[0068.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", dwFileAttributes=0x80) returned 0
	[0068.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4420
	os_tid = 0x513c

	[0068.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", dwFileAttributes=0x80) returned 0
	[0068.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4421
	os_tid = 0x5140

	[0068.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", dwFileAttributes=0x80) returned 0
	[0068.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4422
	os_tid = 0x5144

	[0068.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL", dwFileAttributes=0x80) returned 0
	[0068.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MLCFG32.CPL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mlcfg32.cpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4423
	os_tid = 0x5148

	[0068.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", dwFileAttributes=0x80) returned 0
	[0068.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.820] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4424
	os_tid = 0x514c

	[0068.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB", dwFileAttributes=0x80) returned 0
	[0068.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACC.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msacc.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4425
	os_tid = 0x5150

	[0068.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0068.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4426
	os_tid = 0x5154

	[0068.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub", dwFileAttributes=0x80) returned 0
	[0068.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4427
	os_tid = 0x5158

	[0068.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub", dwFileAttributes=0x80) returned 0
	[0068.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4428
	os_tid = 0x515c

	[0068.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub", dwFileAttributes=0x80) returned 0
	[0068.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7cm_fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7cm_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4429
	os_tid = 0x5160

	[0068.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub", dwFileAttributes=0x80) returned 0
	[0068.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4430
	os_tid = 0x5164

	[0068.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub", dwFileAttributes=0x80) returned 0
	[0068.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4431
	os_tid = 0x5168

	[0068.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub", dwFileAttributes=0x80) returned 0
	[0068.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mscss7wre_fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mscss7wre_fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4432
	os_tid = 0x516c

	[0068.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic", dwFileAttributes=0x80) returned 0
	[0068.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7db.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7db.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4433
	os_tid = 0x5170

	[0068.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic", dwFileAttributes=0x80) returned 0
	[0068.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7en.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7en.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4434
	os_tid = 0x5174

	[0068.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic", dwFileAttributes=0x80) returned 0
	[0068.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7es.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7es.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4435
	os_tid = 0x5178

	[0068.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic", dwFileAttributes=0x80) returned 0
	[0068.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7fr.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7fr.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.834] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4436
	os_tid = 0x517c

	[0068.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic", dwFileAttributes=0x80) returned 0
	[0068.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7ge.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7ge.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4437
	os_tid = 0x5180

	[0068.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic", dwFileAttributes=0x80) returned 0
	[0068.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\mset7jp.kic" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mset7jp.kic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4438
	os_tid = 0x5184

	[0068.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man", dwFileAttributes=0x80) returned 0
	[0068.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSIPC\\MSIPCEvents.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msipc\\msipcevents.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.884] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4439
	os_tid = 0x5188

	[0068.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL", dwFileAttributes=0x80) returned 0
	[0068.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSO0127.ACL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mso0127.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.962] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4440
	os_tid = 0x518c

	[0068.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP", dwFileAttributes=0x80) returned 0
	[0068.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOCRRES.ORP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msocrres.orp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.964] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4441
	os_tid = 0x5190

	[0068.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", dwFileAttributes=0x80) returned 0
	[0068.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.965] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4442
	os_tid = 0x5194

	[0068.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB", dwFileAttributes=0x80) returned 0
	[0068.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUTL.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutl.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4443
	os_tid = 0x5198

	[0068.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB", dwFileAttributes=0x80) returned 0
	[0068.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPPT.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msppt.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.967] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4444
	os_tid = 0x519c

	[0068.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB", dwFileAttributes=0x80) returned 0
	[0068.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPRJ.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msprj.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4445
	os_tid = 0x51a0

	[0068.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", dwFileAttributes=0x80) returned 0
	[0068.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4446
	os_tid = 0x51a4

	[0068.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0068.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4447
	os_tid = 0x51a8

	[0068.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB", dwFileAttributes=0x80) returned 0
	[0068.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSWORD.OLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msword.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4448
	os_tid = 0x51ac

	[0068.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", dwFileAttributes=0x80) returned 0
	[0068.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4449
	os_tid = 0x51b0

	[0068.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", dwFileAttributes=0x80) returned 0
	[0068.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4450
	os_tid = 0x51b4

	[0068.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", dwFileAttributes=0x80) returned 0
	[0068.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.977] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4451
	os_tid = 0x51b8

	[0068.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap", dwFileAttributes=0x80) returned 0
	[0068.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostAnnotationApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\nativehostannotationapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4452
	os_tid = 0x51bc

	[0068.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap", dwFileAttributes=0x80) returned 0
	[0068.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NativeHostPollApp.xap" (normalized: "c:\\program files\\microsoft office\\root\\office16\\nativehostpollapp.xap"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4453
	os_tid = 0x51c0

	[0068.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", dwFileAttributes=0x80) returned 0
	[0068.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.982] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4454
	os_tid = 0x51c4

	[0068.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", dwFileAttributes=0x80) returned 0
	[0068.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.983] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4455
	os_tid = 0x51c8

	[0068.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf", dwFileAttributes=0x80) returned 0
	[0068.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnms006.inf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnms006.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.989] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4456
	os_tid = 0x51cc

	[0068.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat", dwFileAttributes=0x80) returned 0
	[0068.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote.cat" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.994] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4457
	os_tid = 0x51d0

	[0068.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat", dwFileAttributes=0x80) returned 0
	[0068.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.cat" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote_win7.cat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0068.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4458
	os_tid = 0x51d4

	[0069.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf", dwFileAttributes=0x80) returned 0
	[0069.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\prnSendToOneNote_win7.inf" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\prnsendtoonenote_win7.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.004] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4459
	os_tid = 0x51d8

	[0069.005] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml", dwFileAttributes=0x80) returned 0
	[0069.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote-PipelineConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenote-pipelineconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.009] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4460
	os_tid = 0x51dc

	[0069.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd", dwFileAttributes=0x80) returned 0
	[0069.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNote.gpd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenote.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.013] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4461
	os_tid = 0x51e0

	[0069.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd", dwFileAttributes=0x80) returned 0
	[0069.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OneNote\\SendToOneNoteNames.gpd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote\\sendtoonenotenames.gpd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.016] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4462
	os_tid = 0x51e4

	[0069.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0069.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.017] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4463
	os_tid = 0x51e8

	[0069.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", dwFileAttributes=0x80) returned 0
	[0069.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.019] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4464
	os_tid = 0x51ec

	[0069.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0069.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.020] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4465
	os_tid = 0x51f0

	[0069.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\AMERITECH.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\ameritech.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4466
	os_tid = 0x51f4

	[0069.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTINTERNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\btinternet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.022] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4467
	os_tid = 0x51f8

	[0069.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML", dwFileAttributes=0x80) returned 0
	[0069.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\BTOPENWORLD.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\btopenworld.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4468
	os_tid = 0x51fc

	[0069.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\FLASH.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\flash.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.024] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4469
	os_tid = 0x5200

	[0069.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML", dwFileAttributes=0x80) returned 0
	[0069.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\GMAIL.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\gmail.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.026] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4470
	os_tid = 0x5204

	[0069.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML", dwFileAttributes=0x80) returned 0
	[0069.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NL.ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\nl.rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.028] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4471
	os_tid = 0x5208

	[0069.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\NVBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\nvbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.029] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4472
	os_tid = 0x520c

	[0069.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PACBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\pacbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.030] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4473
	os_tid = 0x5210

	[0069.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\PRODIGY.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\prodigy.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4474
	os_tid = 0x5214

	[0069.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML", dwFileAttributes=0x80) returned 0
	[0069.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\ROGERS.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\rogers.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4475
	os_tid = 0x5218

	[0069.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SBCGLOBAL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\sbcglobal.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.033] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4476
	os_tid = 0x521c

	[0069.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SNET.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\snet.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.034] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4477
	os_tid = 0x5220

	[0069.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\SWBELL.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\swbell.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.035] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4478
	os_tid = 0x5224

	[0069.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML", dwFileAttributes=0x80) returned 0
	[0069.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\TALK21.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\talk21.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4479
	os_tid = 0x5228

	[0069.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML", dwFileAttributes=0x80) returned 0
	[0069.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\WANS.NET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\wans.net.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.037] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4480
	os_tid = 0x522c

	[0069.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML", dwFileAttributes=0x80) returned 0
	[0069.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CA.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.ca.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4481
	os_tid = 0x5230

	[0069.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML", dwFileAttributes=0x80) returned 0
	[0069.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.ID.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.id.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.039] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4482
	os_tid = 0x5234

	[0069.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML", dwFileAttributes=0x80) returned 0
	[0069.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.IN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.in.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.040] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4483
	os_tid = 0x5238

	[0069.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML", dwFileAttributes=0x80) returned 0
	[0069.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.JP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.042] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4484
	os_tid = 0x523c

	[0069.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML", dwFileAttributes=0x80) returned 0
	[0069.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.KR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.kr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.043] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4485
	os_tid = 0x5240

	[0069.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML", dwFileAttributes=0x80) returned 0
	[0069.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.NZ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.nz.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.043] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4486
	os_tid = 0x5244

	[0069.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML", dwFileAttributes=0x80) returned 0
	[0069.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.TH.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.th.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.044] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4487
	os_tid = 0x5248

	[0069.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML", dwFileAttributes=0x80) returned 0
	[0069.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.CO.UK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.co.uk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.045] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4488
	os_tid = 0x524c

	[0069.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML", dwFileAttributes=0x80) returned 0
	[0069.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.ar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.046] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4489
	os_tid = 0x5250

	[0069.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML", dwFileAttributes=0x80) returned 0
	[0069.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.AU.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.au.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.047] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4490
	os_tid = 0x5254

	[0069.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML", dwFileAttributes=0x80) returned 0
	[0069.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.BR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.br.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.048] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4491
	os_tid = 0x5258

	[0069.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML", dwFileAttributes=0x80) returned 0
	[0069.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.CN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.cn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.050] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4492
	os_tid = 0x525c

	[0069.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML", dwFileAttributes=0x80) returned 0
	[0069.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.HK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.051] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4493
	os_tid = 0x5260

	[0069.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML", dwFileAttributes=0x80) returned 0
	[0069.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.mx.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.052] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4494
	os_tid = 0x5264

	[0069.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML", dwFileAttributes=0x80) returned 0
	[0069.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.MY.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.my.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.053] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4495
	os_tid = 0x5268

	[0069.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML", dwFileAttributes=0x80) returned 0
	[0069.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.PH.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.ph.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4496
	os_tid = 0x526c

	[0069.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML", dwFileAttributes=0x80) returned 0
	[0069.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.SG.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.sg.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.056] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4497
	os_tid = 0x5270

	[0069.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML", dwFileAttributes=0x80) returned 0
	[0069.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.TW.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.tw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.056] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4498
	os_tid = 0x5274

	[0069.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML", dwFileAttributes=0x80) returned 0
	[0069.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.VN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.vn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4499
	os_tid = 0x5278

	[0069.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML", dwFileAttributes=0x80) returned 0
	[0069.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.COM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.com.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4500
	os_tid = 0x527c

	[0069.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML", dwFileAttributes=0x80) returned 0
	[0069.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.DE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.de.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.060] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4501
	os_tid = 0x5280

	[0069.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML", dwFileAttributes=0x80) returned 0
	[0069.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.ES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4502
	os_tid = 0x5284

	[0069.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML", dwFileAttributes=0x80) returned 0
	[0069.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.FR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.062] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4503
	os_tid = 0x5288

	[0069.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML", dwFileAttributes=0x80) returned 0
	[0069.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.HK.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.hk.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.063] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4504
	os_tid = 0x528c

	[0069.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML", dwFileAttributes=0x80) returned 0
	[0069.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.ie.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.065] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4505
	os_tid = 0x5290

	[0069.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML", dwFileAttributes=0x80) returned 0
	[0069.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.IT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.it.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.138] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4506
	os_tid = 0x5294

	[0069.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML", dwFileAttributes=0x80) returned 0
	[0069.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.JP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.jp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.142] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4507
	os_tid = 0x5298

	[0069.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML", dwFileAttributes=0x80) returned 0
	[0069.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.NO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.no.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.145] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4508
	os_tid = 0x529c

	[0069.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML", dwFileAttributes=0x80) returned 0
	[0069.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.PL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.pl.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4509
	os_tid = 0x52a0

	[0069.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML", dwFileAttributes=0x80) returned 0
	[0069.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OutlookAutoDiscover\\YAHOO.SE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlookautodiscover\\yahoo.se.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.153] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4510
	os_tid = 0x52a4

	[0069.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML", dwFileAttributes=0x80) returned 0
	[0069.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL001.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4511
	os_tid = 0x52a8

	[0069.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML", dwFileAttributes=0x80) returned 0
	[0069.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL002.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.156] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4512
	os_tid = 0x52ac

	[0069.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML", dwFileAttributes=0x80) returned 0
	[0069.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL010.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4513
	os_tid = 0x52b0

	[0069.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML", dwFileAttributes=0x80) returned 0
	[0069.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL011.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4514
	os_tid = 0x52b4

	[0069.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML", dwFileAttributes=0x80) returned 0
	[0069.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL012.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl012.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4515
	os_tid = 0x52b8

	[0069.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML", dwFileAttributes=0x80) returned 0
	[0069.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL016.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl016.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.160] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4516
	os_tid = 0x52bc

	[0069.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML", dwFileAttributes=0x80) returned 0
	[0069.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL020.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4517
	os_tid = 0x52c0

	[0069.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML", dwFileAttributes=0x80) returned 0
	[0069.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL022.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4518
	os_tid = 0x52c4

	[0069.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML", dwFileAttributes=0x80) returned 0
	[0069.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL026.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4519
	os_tid = 0x52c8

	[0069.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML", dwFileAttributes=0x80) returned 0
	[0069.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL027.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4520
	os_tid = 0x52cc

	[0069.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML", dwFileAttributes=0x80) returned 0
	[0069.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL044.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4521
	os_tid = 0x52d0

	[0069.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML", dwFileAttributes=0x80) returned 0
	[0069.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL048.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4522
	os_tid = 0x52d4

	[0069.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML", dwFileAttributes=0x80) returned 0
	[0069.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL054.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4523
	os_tid = 0x52d8

	[0069.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML", dwFileAttributes=0x80) returned 0
	[0069.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL058.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4524
	os_tid = 0x52dc

	[0069.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML", dwFileAttributes=0x80) returned 0
	[0069.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL065.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4525
	os_tid = 0x52e0

	[0069.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML", dwFileAttributes=0x80) returned 0
	[0069.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL075.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4526
	os_tid = 0x52e4

	[0069.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML", dwFileAttributes=0x80) returned 0
	[0069.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL077.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl077.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4527
	os_tid = 0x52e8

	[0069.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML", dwFileAttributes=0x80) returned 0
	[0069.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL078.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl078.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4528
	os_tid = 0x52ec

	[0069.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML", dwFileAttributes=0x80) returned 0
	[0069.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL081.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4529
	os_tid = 0x52f0

	[0069.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML", dwFileAttributes=0x80) returned 0
	[0069.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL082.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4530
	os_tid = 0x52f4

	[0069.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML", dwFileAttributes=0x80) returned 0
	[0069.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL083.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl083.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4531
	os_tid = 0x52f8

	[0069.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML", dwFileAttributes=0x80) returned 0
	[0069.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL086.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4532
	os_tid = 0x52fc

	[0069.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML", dwFileAttributes=0x80) returned 0
	[0069.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL087.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl087.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4533
	os_tid = 0x5300

	[0069.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML", dwFileAttributes=0x80) returned 0
	[0069.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL089.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4534
	os_tid = 0x5304

	[0069.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML", dwFileAttributes=0x80) returned 0
	[0069.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL090.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4535
	os_tid = 0x5308

	[0069.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML", dwFileAttributes=0x80) returned 0
	[0069.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL092.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4536
	os_tid = 0x530c

	[0069.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML", dwFileAttributes=0x80) returned 0
	[0069.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL093.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl093.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4537
	os_tid = 0x5310

	[0069.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML", dwFileAttributes=0x80) returned 0
	[0069.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL095.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4538
	os_tid = 0x5314

	[0069.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML", dwFileAttributes=0x80) returned 0
	[0069.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL096.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4539
	os_tid = 0x5318

	[0069.185] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML", dwFileAttributes=0x80) returned 0
	[0069.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL097.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4540
	os_tid = 0x531c

	[0069.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML", dwFileAttributes=0x80) returned 0
	[0069.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL102.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4541
	os_tid = 0x5320

	[0069.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML", dwFileAttributes=0x80) returned 0
	[0069.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL103.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4542
	os_tid = 0x5324

	[0069.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML", dwFileAttributes=0x80) returned 0
	[0069.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL104.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl104.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.229] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4543
	os_tid = 0x5328

	[0069.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML", dwFileAttributes=0x80) returned 0
	[0069.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL105.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.230] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4544
	os_tid = 0x532c

	[0069.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML", dwFileAttributes=0x80) returned 0
	[0069.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL106.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl106.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.231] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4545
	os_tid = 0x5330

	[0069.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML", dwFileAttributes=0x80) returned 0
	[0069.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL107.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.232] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4546
	os_tid = 0x5334

	[0069.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML", dwFileAttributes=0x80) returned 0
	[0069.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL108.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.233] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4547
	os_tid = 0x5338

	[0069.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML", dwFileAttributes=0x80) returned 0
	[0069.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL109.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.234] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4548
	os_tid = 0x533c

	[0069.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML", dwFileAttributes=0x80) returned 0
	[0069.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL110.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.235] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4549
	os_tid = 0x5340

	[0069.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML", dwFileAttributes=0x80) returned 0
	[0069.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL111.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.236] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4550
	os_tid = 0x5344

	[0069.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML", dwFileAttributes=0x80) returned 0
	[0069.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL112.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl112.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4551
	os_tid = 0x5348

	[0069.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML", dwFileAttributes=0x80) returned 0
	[0069.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL115.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl115.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4552
	os_tid = 0x534c

	[0069.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML", dwFileAttributes=0x80) returned 0
	[0069.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL116.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl116.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.278] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4553
	os_tid = 0x5350

	[0069.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML", dwFileAttributes=0x80) returned 0
	[0069.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL117.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl117.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.279] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4554
	os_tid = 0x5354

	[0069.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML", dwFileAttributes=0x80) returned 0
	[0069.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL118.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl118.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4555
	os_tid = 0x5358

	[0069.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML", dwFileAttributes=0x80) returned 0
	[0069.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL119.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl119.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.281] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4556
	os_tid = 0x535c

	[0069.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML", dwFileAttributes=0x80) returned 0
	[0069.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGLBL120.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pglbl120.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4557
	os_tid = 0x5360

	[0069.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML", dwFileAttributes=0x80) returned 0
	[0069.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN001.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn001.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.299] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4558
	os_tid = 0x5364

	[0069.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML", dwFileAttributes=0x80) returned 0
	[0069.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN002.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn002.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.301] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4559
	os_tid = 0x5368

	[0069.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML", dwFileAttributes=0x80) returned 0
	[0069.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN010.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn010.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.302] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4560
	os_tid = 0x536c

	[0069.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML", dwFileAttributes=0x80) returned 0
	[0069.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN011.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn011.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.303] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4561
	os_tid = 0x5370

	[0069.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML", dwFileAttributes=0x80) returned 0
	[0069.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN020.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn020.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4562
	os_tid = 0x5374

	[0069.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML", dwFileAttributes=0x80) returned 0
	[0069.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN022.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn022.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4563
	os_tid = 0x5378

	[0069.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML", dwFileAttributes=0x80) returned 0
	[0069.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN026.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn026.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.313] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4564
	os_tid = 0x537c

	[0069.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML", dwFileAttributes=0x80) returned 0
	[0069.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN027.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn027.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.314] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4565
	os_tid = 0x5380

	[0069.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML", dwFileAttributes=0x80) returned 0
	[0069.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN044.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn044.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.315] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4566
	os_tid = 0x5384

	[0069.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML", dwFileAttributes=0x80) returned 0
	[0069.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN048.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn048.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4567
	os_tid = 0x5388

	[0069.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML", dwFileAttributes=0x80) returned 0
	[0069.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN054.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn054.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.318] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4568
	os_tid = 0x538c

	[0069.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML", dwFileAttributes=0x80) returned 0
	[0069.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN058.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn058.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4569
	os_tid = 0x5390

	[0069.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML", dwFileAttributes=0x80) returned 0
	[0069.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN065.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn065.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4570
	os_tid = 0x5394

	[0069.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML", dwFileAttributes=0x80) returned 0
	[0069.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN075.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn075.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.322] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4571
	os_tid = 0x5398

	[0069.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML", dwFileAttributes=0x80) returned 0
	[0069.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN081.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn081.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4572
	os_tid = 0x539c

	[0069.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML", dwFileAttributes=0x80) returned 0
	[0069.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN082.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn082.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4573
	os_tid = 0x53a0

	[0069.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML", dwFileAttributes=0x80) returned 0
	[0069.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN086.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn086.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4574
	os_tid = 0x53a4

	[0069.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML", dwFileAttributes=0x80) returned 0
	[0069.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN089.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn089.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.329] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4575
	os_tid = 0x53a8

	[0069.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML", dwFileAttributes=0x80) returned 0
	[0069.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN090.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn090.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4576
	os_tid = 0x53ac

	[0069.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML", dwFileAttributes=0x80) returned 0
	[0069.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN092.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn092.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.331] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4577
	os_tid = 0x53b0

	[0069.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML", dwFileAttributes=0x80) returned 0
	[0069.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN095.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn095.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.332] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4578
	os_tid = 0x53b4

	[0069.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML", dwFileAttributes=0x80) returned 0
	[0069.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN096.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn096.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4579
	os_tid = 0x53b8

	[0069.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML", dwFileAttributes=0x80) returned 0
	[0069.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN097.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn097.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4580
	os_tid = 0x53bc

	[0069.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML", dwFileAttributes=0x80) returned 0
	[0069.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN102.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn102.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4581
	os_tid = 0x53c0

	[0069.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML", dwFileAttributes=0x80) returned 0
	[0069.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN103.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn103.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4582
	os_tid = 0x53c4

	[0069.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML", dwFileAttributes=0x80) returned 0
	[0069.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN105.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn105.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.338] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4583
	os_tid = 0x53c8

	[0069.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML", dwFileAttributes=0x80) returned 0
	[0069.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN107.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn107.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4584
	os_tid = 0x53cc

	[0069.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML", dwFileAttributes=0x80) returned 0
	[0069.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN108.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn108.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.340] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4585
	os_tid = 0x53d0

	[0069.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML", dwFileAttributes=0x80) returned 0
	[0069.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN109.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn109.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4586
	os_tid = 0x53d4

	[0069.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML", dwFileAttributes=0x80) returned 0
	[0069.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN110.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4587
	os_tid = 0x53d8

	[0069.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML", dwFileAttributes=0x80) returned 0
	[0069.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN111.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn111.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4588
	os_tid = 0x53dc

	[0069.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML", dwFileAttributes=0x80) returned 0
	[0069.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN114.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn114.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4589
	os_tid = 0x53e0

	[0069.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML", dwFileAttributes=0x80) returned 0
	[0069.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PGMN120.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pgmn120.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4590
	os_tid = 0x53e4

	[0069.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML", dwFileAttributes=0x80) returned 0
	[0069.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PAGESIZE\\PG_INDEX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pagesize\\pg_index.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.396] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4591
	os_tid = 0x53e8

	[0069.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms", dwFileAttributes=0x80) returned 0
	[0069.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4592
	os_tid = 0x53ec

	[0069.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0069.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4593
	os_tid = 0x53f0

	[0069.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub", dwFileAttributes=0x80) returned 0
	[0069.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8en.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.401] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4594
	os_tid = 0x53f4

	[0069.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX", dwFileAttributes=0x80) returned 0
	[0069.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4595
	os_tid = 0x53f8

	[0069.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub", dwFileAttributes=0x80) returned 0
	[0069.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8es.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4596
	os_tid = 0x53fc

	[0069.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX", dwFileAttributes=0x80) returned 0
	[0069.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4597
	os_tid = 0xfbc

	[0069.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub", dwFileAttributes=0x80) returned 0
	[0069.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msgr8fr.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4598
	os_tid = 0x5404

	[0069.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX", dwFileAttributes=0x80) returned 0
	[0069.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSGR8FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msgr8fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4599
	os_tid = 0x5408

	[0069.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX", dwFileAttributes=0x80) returned 0
	[0069.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4600
	os_tid = 0x540c

	[0069.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX", dwFileAttributes=0x80) returned 0
	[0069.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4601
	os_tid = 0x5410

	[0069.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX", dwFileAttributes=0x80) returned 0
	[0069.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSHY7FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mshy7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4602
	os_tid = 0x5414

	[0069.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub", dwFileAttributes=0x80) returned 0
	[0069.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7en.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4603
	os_tid = 0x5418

	[0069.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX", dwFileAttributes=0x80) returned 0
	[0069.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4604
	os_tid = 0x541c

	[0069.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub", dwFileAttributes=0x80) returned 0
	[0069.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7es.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4605
	os_tid = 0x5420

	[0069.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX", dwFileAttributes=0x80) returned 0
	[0069.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4606
	os_tid = 0x5424

	[0069.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub", dwFileAttributes=0x80) returned 0
	[0069.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.dub" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7fr.dub"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4607
	os_tid = 0x5428

	[0069.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX", dwFileAttributes=0x80) returned 0
	[0069.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\MSSP7FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\mssp7fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.415] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4608
	os_tid = 0x542c

	[0069.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX", dwFileAttributes=0x80) returned 0
	[0069.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4609
	os_tid = 0x5430

	[0069.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX", dwFileAttributes=0x80) returned 0
	[0069.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4610
	os_tid = 0x5434

	[0069.418] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX", dwFileAttributes=0x80) returned 0
	[0069.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROOF\\msth8FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\proof\\msth8fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4611
	os_tid = 0x5438

	[0069.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR", dwFileAttributes=0x80) returned 0
	[0069.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB10.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub10.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4612
	os_tid = 0x543c

	[0069.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR", dwFileAttributes=0x80) returned 0
	[0069.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB11.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub11.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4613
	os_tid = 0x5440

	[0069.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR", dwFileAttributes=0x80) returned 0
	[0069.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub1a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4614
	os_tid = 0x5444

	[0069.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR", dwFileAttributes=0x80) returned 0
	[0069.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB1B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub1b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4615
	os_tid = 0x5448

	[0069.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR", dwFileAttributes=0x80) returned 0
	[0069.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub2a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4616
	os_tid = 0x544c

	[0069.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR", dwFileAttributes=0x80) returned 0
	[0069.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB2B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub2b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4617
	os_tid = 0x5450

	[0069.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR", dwFileAttributes=0x80) returned 0
	[0069.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub3a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4618
	os_tid = 0x5454

	[0069.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR", dwFileAttributes=0x80) returned 0
	[0069.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB3B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub3b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4619
	os_tid = 0x5458

	[0069.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR", dwFileAttributes=0x80) returned 0
	[0069.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB4.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub4.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4620
	os_tid = 0x545c

	[0069.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR", dwFileAttributes=0x80) returned 0
	[0069.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5A.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub5a.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4621
	os_tid = 0x5460

	[0069.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR", dwFileAttributes=0x80) returned 0
	[0069.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB5B.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub5b.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.543] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4622
	os_tid = 0x5468

	[0069.544] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR", dwFileAttributes=0x80) returned 0
	[0069.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB6.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub6.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.551] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4623
	os_tid = 0x546c

	[0069.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR", dwFileAttributes=0x80) returned 0
	[0069.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB7.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub7.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4624
	os_tid = 0x5470

	[0069.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR", dwFileAttributes=0x80) returned 0
	[0069.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB8.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub8.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4625
	os_tid = 0x5474

	[0069.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR", dwFileAttributes=0x80) returned 0
	[0069.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBBA\\MSPUB9.BDR" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubba\\mspub9.bdr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4626
	os_tid = 0x5478

	[0069.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC", dwFileAttributes=0x80) returned 0
	[0069.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCSBAR.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\accsbar.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.571] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4627
	os_tid = 0x547c

	[0069.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC", dwFileAttributes=0x80) returned 0
	[0069.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ACCTBOX.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\acctbox.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.572] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4628
	os_tid = 0x5480

	[0069.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV", dwFileAttributes=0x80) returned 0
	[0069.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4629
	os_tid = 0x5484

	[0069.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML", dwFileAttributes=0x80) returned 0
	[0069.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4630
	os_tid = 0x5488

	[0069.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC", dwFileAttributes=0x80) returned 0
	[0069.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ad98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4631
	os_tid = 0x548c

	[0069.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC", dwFileAttributes=0x80) returned 0
	[0069.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ADRESPEL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\adrespel.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.577] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4632
	os_tid = 0x5490

	[0069.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC", dwFileAttributes=0x80) returned 0
	[0069.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AIR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\air98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4633
	os_tid = 0x5494

	[0069.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC", dwFileAttributes=0x80) returned 0
	[0069.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\AWARDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\awardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4634
	os_tid = 0x5498

	[0069.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC", dwFileAttributes=0x80) returned 0
	[0069.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BAN98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ban98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4635
	os_tid = 0x549c

	[0069.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV", dwFileAttributes=0x80) returned 0
	[0069.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\banner.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4636
	os_tid = 0x54a0

	[0069.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML", dwFileAttributes=0x80) returned 0
	[0069.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BANNER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\banner.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4637
	os_tid = 0x54a4

	[0069.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC", dwFileAttributes=0x80) returned 0
	[0069.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BDRTKFUL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bdrtkful.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4638
	os_tid = 0x54a8

	[0069.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV", dwFileAttributes=0x80) returned 0
	[0069.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4639
	os_tid = 0x54ac

	[0069.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML", dwFileAttributes=0x80) returned 0
	[0069.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZCARD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4640
	os_tid = 0x54b0

	[0069.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV", dwFileAttributes=0x80) returned 0
	[0069.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizform.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.586] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4641
	os_tid = 0x54b4

	[0069.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML", dwFileAttributes=0x80) returned 0
	[0069.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BIZFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bizform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.587] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4642
	os_tid = 0x54b8

	[0069.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV", dwFileAttributes=0x80) returned 0
	[0069.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\borderbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.588] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4643
	os_tid = 0x54bc

	[0069.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC", dwFileAttributes=0x80) returned 0
	[0069.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BORDERBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\borderbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4644
	os_tid = 0x54c0

	[0069.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC", dwFileAttributes=0x80) returned 0
	[0069.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCH98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brch98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.591] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4645
	os_tid = 0x54c4

	[0069.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC", dwFileAttributes=0x80) returned 0
	[0069.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brchur11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.592] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4646
	os_tid = 0x54c8

	[0069.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC", dwFileAttributes=0x80) returned 0
	[0069.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BRCHUR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brchur98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.593] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4647
	os_tid = 0x54cc

	[0069.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV", dwFileAttributes=0x80) returned 0
	[0069.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brochure.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4648
	os_tid = 0x54d0

	[0069.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML", dwFileAttributes=0x80) returned 0
	[0069.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BROCHURE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\brochure.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4649
	os_tid = 0x54d4

	[0069.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC", dwFileAttributes=0x80) returned 0
	[0069.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS2BARB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs2barb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.657] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4650
	os_tid = 0x54d8

	[0069.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC", dwFileAttributes=0x80) returned 0
	[0069.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS4BOXES.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs4boxes.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.658] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4651
	os_tid = 0x54dc

	[0069.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC", dwFileAttributes=0x80) returned 0
	[0069.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BS53BOXS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bs53boxs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.659] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4652
	os_tid = 0x54e0

	[0069.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC", dwFileAttributes=0x80) returned 0
	[0069.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcard11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4653
	os_tid = 0x54e4

	[0069.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC", dwFileAttributes=0x80) returned 0
	[0069.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCARDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcardhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4654
	os_tid = 0x54e8

	[0069.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC", dwFileAttributes=0x80) returned 0
	[0069.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCD98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.662] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4655
	os_tid = 0x54ec

	[0069.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC", dwFileAttributes=0x80) returned 0
	[0069.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\BZCRD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\bzcrd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.662] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4656
	os_tid = 0x54f0

	[0069.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV", dwFileAttributes=0x80) returned 0
	[0069.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calendar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.663] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4657
	os_tid = 0x54f4

	[0069.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML", dwFileAttributes=0x80) returned 0
	[0069.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALENDAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calendar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4658
	os_tid = 0x54f8

	[0069.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC", dwFileAttributes=0x80) returned 0
	[0069.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.665] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4659
	os_tid = 0x54fc

	[0069.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC", dwFileAttributes=0x80) returned 0
	[0069.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALNDR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calndr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.666] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4660
	os_tid = 0x5500

	[0069.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC", dwFileAttributes=0x80) returned 0
	[0069.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calso11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.667] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4661
	os_tid = 0x5504

	[0069.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC", dwFileAttributes=0x80) returned 0
	[0069.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CALSO98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\calso98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4662
	os_tid = 0x5508

	[0069.669] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV", dwFileAttributes=0x80) returned 0
	[0069.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catalog.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.669] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4663
	os_tid = 0x550c

	[0069.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML", dwFileAttributes=0x80) returned 0
	[0069.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATALOG.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catalog.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.670] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4664
	os_tid = 0x5510

	[0069.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC", dwFileAttributes=0x80) returned 0
	[0069.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.670] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4665
	os_tid = 0x5514

	[0069.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC", dwFileAttributes=0x80) returned 0
	[0069.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CATWIZ11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\catwiz11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4666
	os_tid = 0x5518

	[0069.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV", dwFileAttributes=0x80) returned 0
	[0069.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.673] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4667
	os_tid = 0x551c

	[0069.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML", dwFileAttributes=0x80) returned 0
	[0069.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.674] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4668
	os_tid = 0x5520

	[0069.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC", dwFileAttributes=0x80) returned 0
	[0069.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4669
	os_tid = 0x5524

	[0069.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC", dwFileAttributes=0x80) returned 0
	[0069.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CERT98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\cert98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4670
	os_tid = 0x5528

	[0069.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC", dwFileAttributes=0x80) returned 0
	[0069.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CHECKER.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\checker.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4671
	os_tid = 0x552c

	[0069.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV", dwFileAttributes=0x80) returned 0
	[0069.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\contactinfobb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.678] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4672
	os_tid = 0x5530

	[0069.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC", dwFileAttributes=0x80) returned 0
	[0069.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\CONTACTINFOBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\contactinfobb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.679] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4673
	os_tid = 0x5534

	[0069.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC", dwFileAttributes=0x80) returned 0
	[0069.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\COUPON.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\coupon.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4674
	os_tid = 0x5538

	[0069.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV", dwFileAttributes=0x80) returned 0
	[0069.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4675
	os_tid = 0x553c

	[0069.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML", dwFileAttributes=0x80) returned 0
	[0069.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.682] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4676
	os_tid = 0x5540

	[0069.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV", dwFileAttributes=0x80) returned 0
	[0069.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbox.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4677
	os_tid = 0x5544

	[0069.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML", dwFileAttributes=0x80) returned 0
	[0069.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGACCBOX.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgaccbox.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4678
	os_tid = 0x5548

	[0069.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV", dwFileAttributes=0x80) returned 0
	[0069.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgad.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4679
	os_tid = 0x554c

	[0069.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML", dwFileAttributes=0x80) returned 0
	[0069.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4680
	os_tid = 0x5550

	[0069.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV", dwFileAttributes=0x80) returned 0
	[0069.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgatnget.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4681
	os_tid = 0x5554

	[0069.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML", dwFileAttributes=0x80) returned 0
	[0069.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGATNGET.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgatnget.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4682
	os_tid = 0x5558

	[0069.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV", dwFileAttributes=0x80) returned 0
	[0069.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgbarbll.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4683
	os_tid = 0x555c

	[0069.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML", dwFileAttributes=0x80) returned 0
	[0069.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBARBLL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgbarbll.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.691] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4684
	os_tid = 0x5560

	[0069.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV", dwFileAttributes=0x80) returned 0
	[0069.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgborder.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4685
	os_tid = 0x5564

	[0069.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML", dwFileAttributes=0x80) returned 0
	[0069.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBORDER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgborder.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4686
	os_tid = 0x5568

	[0069.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV", dwFileAttributes=0x80) returned 0
	[0069.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgboxes.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4687
	os_tid = 0x556c

	[0069.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML", dwFileAttributes=0x80) returned 0
	[0069.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGBOXES.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgboxes.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.695] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4688
	os_tid = 0x5570

	[0069.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV", dwFileAttributes=0x80) returned 0
	[0069.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4689
	os_tid = 0x5574

	[0069.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML", dwFileAttributes=0x80) returned 0
	[0069.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCAL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4690
	os_tid = 0x5578

	[0069.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV", dwFileAttributes=0x80) returned 0
	[0069.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgchkbrd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4691
	os_tid = 0x557c

	[0069.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML", dwFileAttributes=0x80) returned 0
	[0069.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCHKBRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgchkbrd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4692
	os_tid = 0x5580

	[0069.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML", dwFileAttributes=0x80) returned 0
	[0069.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCINFO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.780] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4693
	os_tid = 0x5584

	[0069.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV", dwFileAttributes=0x80) returned 0
	[0069.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcoupon.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.781] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4694
	os_tid = 0x5588

	[0069.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML", dwFileAttributes=0x80) returned 0
	[0069.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGCOUPON.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgcoupon.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4695
	os_tid = 0x558c

	[0069.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV", dwFileAttributes=0x80) returned 0
	[0069.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgdots.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4696
	os_tid = 0x5590

	[0069.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML", dwFileAttributes=0x80) returned 0
	[0069.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGDOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgdots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4697
	os_tid = 0x5594

	[0069.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML", dwFileAttributes=0x80) returned 0
	[0069.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGHEADING.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgheading.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4698
	os_tid = 0x5598

	[0069.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV", dwFileAttributes=0x80) returned 0
	[0069.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglinacc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.787] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4699
	os_tid = 0x559c

	[0069.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML", dwFileAttributes=0x80) returned 0
	[0069.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLINACC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglinacc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.788] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4700
	os_tid = 0x55a0

	[0069.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV", dwFileAttributes=0x80) returned 0
	[0069.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglogo.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4701
	os_tid = 0x55a4

	[0069.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML", dwFileAttributes=0x80) returned 0
	[0069.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGLOGO.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dglogo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.792] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4702
	os_tid = 0x55a8

	[0069.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML", dwFileAttributes=0x80) returned 0
	[0069.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMAIN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmain.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.794] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4703
	os_tid = 0x55ac

	[0069.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV", dwFileAttributes=0x80) returned 0
	[0069.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmarq.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4704
	os_tid = 0x55b0

	[0069.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML", dwFileAttributes=0x80) returned 0
	[0069.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMARQ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmarq.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4705
	os_tid = 0x55b4

	[0069.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV", dwFileAttributes=0x80) returned 0
	[0069.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGMASTHD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgmasthd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4706
	os_tid = 0x55b8

	[0069.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV", dwFileAttributes=0x80) returned 0
	[0069.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgnavbar.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.799] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4707
	os_tid = 0x55bc

	[0069.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML", dwFileAttributes=0x80) returned 0
	[0069.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGNAVBAR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgnavbar.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.801] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4708
	os_tid = 0x55c0

	[0069.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV", dwFileAttributes=0x80) returned 0
	[0069.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpiccap.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.802] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4709
	os_tid = 0x55c4

	[0069.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML", dwFileAttributes=0x80) returned 0
	[0069.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPICCAP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpiccap.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.803] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4710
	os_tid = 0x55c8

	[0069.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV", dwFileAttributes=0x80) returned 0
	[0069.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpquot.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4711
	os_tid = 0x55cc

	[0069.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML", dwFileAttributes=0x80) returned 0
	[0069.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPQUOT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpquot.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.806] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4712
	os_tid = 0x55d0

	[0069.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV", dwFileAttributes=0x80) returned 0
	[0069.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpunct.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.807] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4713
	os_tid = 0x55d4

	[0069.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML", dwFileAttributes=0x80) returned 0
	[0069.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGPUNCT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgpunct.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4714
	os_tid = 0x55d8

	[0069.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV", dwFileAttributes=0x80) returned 0
	[0069.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgrepfrm.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4715
	os_tid = 0x55dc

	[0069.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML", dwFileAttributes=0x80) returned 0
	[0069.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGREPFRM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgrepfrm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4716
	os_tid = 0x55e0

	[0069.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV", dwFileAttributes=0x80) returned 0
	[0069.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.812] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4717
	os_tid = 0x55e4

	[0069.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML", dwFileAttributes=0x80) returned 0
	[0069.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4718
	os_tid = 0x55e8

	[0069.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML", dwFileAttributes=0x80) returned 0
	[0069.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSIDEBRV.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgsidebrv.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4719
	os_tid = 0x55ec

	[0069.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML", dwFileAttributes=0x80) returned 0
	[0069.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORY.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgstory.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4720
	os_tid = 0x55f0

	[0069.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML", dwFileAttributes=0x80) returned 0
	[0069.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGSTORYVERT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgstoryvert.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4721
	os_tid = 0x55f4

	[0069.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV", dwFileAttributes=0x80) returned 0
	[0069.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTEAR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtear.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4722
	os_tid = 0x55f8

	[0069.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV", dwFileAttributes=0x80) returned 0
	[0069.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtoc.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4723
	os_tid = 0x55fc

	[0069.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML", dwFileAttributes=0x80) returned 0
	[0069.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGTOC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgtoc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.820] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4724
	os_tid = 0x5600

	[0069.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML", dwFileAttributes=0x80) returned 0
	[0069.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4725
	os_tid = 0x5604

	[0069.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV", dwFileAttributes=0x80) returned 0
	[0069.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebbtn.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4726
	os_tid = 0x5608

	[0069.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML", dwFileAttributes=0x80) returned 0
	[0069.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBBTN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebbtn.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4727
	os_tid = 0x560c

	[0069.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV", dwFileAttributes=0x80) returned 0
	[0069.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebcal.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4728
	os_tid = 0x5610

	[0069.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML", dwFileAttributes=0x80) returned 0
	[0069.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBCAL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebcal.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4729
	os_tid = 0x5614

	[0069.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV", dwFileAttributes=0x80) returned 0
	[0069.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebhd.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4730
	os_tid = 0x5618

	[0069.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML", dwFileAttributes=0x80) returned 0
	[0069.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBHD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebhd.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4731
	os_tid = 0x561c

	[0069.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV", dwFileAttributes=0x80) returned 0
	[0069.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebpqt.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4732
	os_tid = 0x5620

	[0069.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML", dwFileAttributes=0x80) returned 0
	[0069.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBPQT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebpqt.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4733
	os_tid = 0x5624

	[0069.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML", dwFileAttributes=0x80) returned 0
	[0069.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBREF.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebref.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4734
	os_tid = 0x5628

	[0069.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV", dwFileAttributes=0x80) returned 0
	[0069.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebsbr.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4735
	os_tid = 0x562c

	[0069.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML", dwFileAttributes=0x80) returned 0
	[0069.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGWEBSBR.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgwebsbr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4736
	os_tid = 0x5630

	[0069.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV", dwFileAttributes=0x80) returned 0
	[0069.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgzip.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4737
	os_tid = 0x5634

	[0069.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML", dwFileAttributes=0x80) returned 0
	[0069.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DGZIPC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dgzipc.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4738
	os_tid = 0x5638

	[0069.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC", dwFileAttributes=0x80) returned 0
	[0069.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DOTS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dots.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4739
	os_tid = 0x563c

	[0069.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC", dwFileAttributes=0x80) returned 0
	[0069.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\DVDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\dvdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.839] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4740
	os_tid = 0x5640

	[0069.840] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV", dwFileAttributes=0x80) returned 0
	[0069.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.840] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4741
	os_tid = 0x5644

	[0069.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML", dwFileAttributes=0x80) returned 0
	[0069.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.841] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4742
	os_tid = 0x5648

	[0069.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC", dwFileAttributes=0x80) returned 0
	[0069.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAIL11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\email11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.842] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4743
	os_tid = 0x564c

	[0069.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC", dwFileAttributes=0x80) returned 0
	[0069.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\EMAILMOD.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\emailmod.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.843] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4744
	os_tid = 0x5650

	[0069.844] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC", dwFileAttributes=0x80) returned 0
	[0069.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.844] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4745
	os_tid = 0x5654

	[0069.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC", dwFileAttributes=0x80) returned 0
	[0069.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.884] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4746
	os_tid = 0x5658

	[0069.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC", dwFileAttributes=0x80) returned 0
	[0069.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENV98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\env98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4747
	os_tid = 0x565c

	[0069.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV", dwFileAttributes=0x80) returned 0
	[0069.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envelope.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4748
	os_tid = 0x5660

	[0069.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML", dwFileAttributes=0x80) returned 0
	[0069.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVELOPE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envelope.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.888] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4749
	os_tid = 0x5664

	[0069.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC", dwFileAttributes=0x80) returned 0
	[0069.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ENVHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\envhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.888] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4750
	os_tid = 0x5668

	[0069.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC", dwFileAttributes=0x80) returned 0
	[0069.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FEZIP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fezip.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.890] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4751
	os_tid = 0x566c

	[0069.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC", dwFileAttributes=0x80) returned 0
	[0069.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLY98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fly98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4752
	os_tid = 0x5670

	[0069.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV", dwFileAttributes=0x80) returned 0
	[0069.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4753
	os_tid = 0x5674

	[0069.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML", dwFileAttributes=0x80) returned 0
	[0069.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4754
	os_tid = 0x5678

	[0069.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC", dwFileAttributes=0x80) returned 0
	[0069.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4755
	os_tid = 0x567c

	[0069.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC", dwFileAttributes=0x80) returned 0
	[0069.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYER98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyer98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0069.897] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4756
	os_tid = 0x5680

	[0070.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC", dwFileAttributes=0x80) returned 0
	[0070.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FLYERHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\flyerhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.035] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4757
	os_tid = 0x5684

	[0070.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV", dwFileAttributes=0x80) returned 0
	[0070.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\foldproj.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.037] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4758
	os_tid = 0x5688

	[0070.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML", dwFileAttributes=0x80) returned 0
	[0070.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FOLDPROJ.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\foldproj.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4759
	os_tid = 0x568c

	[0070.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC", dwFileAttributes=0x80) returned 0
	[0070.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORM98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\form98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.041] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4760
	os_tid = 0x5690

	[0070.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC", dwFileAttributes=0x80) returned 0
	[0070.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FORMCTL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\formctl.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.042] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4761
	os_tid = 0x5694

	[0070.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC", dwFileAttributes=0x80) returned 0
	[0070.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\FS3BOX.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\fs3box.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.043] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4762
	os_tid = 0x5698

	[0070.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV", dwFileAttributes=0x80) returned 0
	[0070.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.045] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4763
	os_tid = 0x569c

	[0070.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML", dwFileAttributes=0x80) returned 0
	[0070.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.046] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4764
	os_tid = 0x56a0

	[0070.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC", dwFileAttributes=0x80) returned 0
	[0070.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GIFT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\gift98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.048] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4765
	os_tid = 0x56a4

	[0070.049] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC", dwFileAttributes=0x80) returned 0
	[0070.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREET11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greet11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.049] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4766
	os_tid = 0x56a8

	[0070.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV", dwFileAttributes=0x80) returned 0
	[0070.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greeting.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.050] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4767
	os_tid = 0x56ac

	[0070.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML", dwFileAttributes=0x80) returned 0
	[0070.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\GREETING.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\greeting.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.052] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4768
	os_tid = 0x56b0

	[0070.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV", dwFileAttributes=0x80) returned 0
	[0070.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\headingbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.053] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4769
	os_tid = 0x56b4

	[0070.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC", dwFileAttributes=0x80) returned 0
	[0070.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\HEADINGBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\headingbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.055] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4770
	os_tid = 0x56b8

	[0070.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV", dwFileAttributes=0x80) returned 0
	[0070.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.056] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4771
	os_tid = 0x56bc

	[0070.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML", dwFileAttributes=0x80) returned 0
	[0070.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4772
	os_tid = 0x56c0

	[0070.058] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC", dwFileAttributes=0x80) returned 0
	[0070.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\INVITE11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\invite11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4773
	os_tid = 0x56c4

	[0070.060] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV", dwFileAttributes=0x80) returned 0
	[0070.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.061] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4774
	os_tid = 0x56c8

	[0070.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML", dwFileAttributes=0x80) returned 0
	[0070.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.064] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4775
	os_tid = 0x56cc

	[0070.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC", dwFileAttributes=0x80) returned 0
	[0070.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABEL98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\label98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.066] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4776
	os_tid = 0x56d0

	[0070.067] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC", dwFileAttributes=0x80) returned 0
	[0070.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LABELHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\labelhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.068] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4777
	os_tid = 0x56d4

	[0070.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV", dwFileAttributes=0x80) returned 0
	[0070.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\letthead.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.105] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4778
	os_tid = 0x56d8

	[0070.105] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML", dwFileAttributes=0x80) returned 0
	[0070.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LETTHEAD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\letthead.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4779
	os_tid = 0x56dc

	[0070.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC", dwFileAttributes=0x80) returned 0
	[0070.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LINEACT.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lineact.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.106] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4780
	os_tid = 0x56e0

	[0070.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC", dwFileAttributes=0x80) returned 0
	[0070.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LOGO98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\logo98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.107] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4781
	os_tid = 0x56e4

	[0070.108] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC", dwFileAttributes=0x80) returned 0
	[0070.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.110] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4782
	os_tid = 0x56e8

	[0070.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC", dwFileAttributes=0x80) returned 0
	[0070.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.111] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4783
	os_tid = 0x56ec

	[0070.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC", dwFileAttributes=0x80) returned 0
	[0070.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHD98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthd98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.112] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4784
	os_tid = 0x56f0

	[0070.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC", dwFileAttributes=0x80) returned 0
	[0070.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\LTHDHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\lthdhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.113] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4785
	os_tid = 0x56f4

	[0070.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML", dwFileAttributes=0x80) returned 0
	[0070.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MAIN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\main.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.114] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4786
	os_tid = 0x56f8

	[0070.115] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC", dwFileAttributes=0x80) returned 0
	[0070.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MARQUEE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\marquee.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.115] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4787
	os_tid = 0x56fc

	[0070.116] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV", dwFileAttributes=0x80) returned 0
	[0070.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.116] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4788
	os_tid = 0x5700

	[0070.117] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML", dwFileAttributes=0x80) returned 0
	[0070.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.117] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4789
	os_tid = 0x5704

	[0070.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC", dwFileAttributes=0x80) returned 0
	[0070.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MENU98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\menu98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.119] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4790
	os_tid = 0x5708

	[0070.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC", dwFileAttributes=0x80) returned 0
	[0070.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\MSTHED98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\msthed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.119] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4791
	os_tid = 0x570c

	[0070.120] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC", dwFileAttributes=0x80) returned 0
	[0070.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBAR11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbar11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.122] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4792
	os_tid = 0x5710

	[0070.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC", dwFileAttributes=0x80) returned 0
	[0070.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBARV.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbarv.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.123] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4793
	os_tid = 0x5714

	[0070.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC", dwFileAttributes=0x80) returned 0
	[0070.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH1.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbrph1.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4794
	os_tid = 0x5718

	[0070.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC", dwFileAttributes=0x80) returned 0
	[0070.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NAVBRPH2.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\navbrph2.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4795
	os_tid = 0x571c

	[0070.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV", dwFileAttributes=0x80) returned 0
	[0070.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4796
	os_tid = 0x5720

	[0070.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML", dwFileAttributes=0x80) returned 0
	[0070.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4797
	os_tid = 0x5724

	[0070.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC", dwFileAttributes=0x80) returned 0
	[0070.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4798
	os_tid = 0x5728

	[0070.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC", dwFileAttributes=0x80) returned 0
	[0070.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWS98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\news98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4799
	os_tid = 0x572c

	[0070.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC", dwFileAttributes=0x80) returned 0
	[0070.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\NEWSHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\newshm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4800
	os_tid = 0x5730

	[0070.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC", dwFileAttributes=0x80) returned 0
	[0070.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\ORIG98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\orig98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4801
	os_tid = 0x5734

	[0070.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC", dwFileAttributes=0x80) returned 0
	[0070.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICCAP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\piccap98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4802
	os_tid = 0x5738

	[0070.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV", dwFileAttributes=0x80) returned 0
	[0070.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICSTYLES.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\picstyles.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4803
	os_tid = 0x573c

	[0070.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC", dwFileAttributes=0x80) returned 0
	[0070.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PICTPH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pictph.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4804
	os_tid = 0x5740

	[0070.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC", dwFileAttributes=0x80) returned 0
	[0070.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PNCTUATE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pnctuate.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4805
	os_tid = 0x5744

	[0070.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC", dwFileAttributes=0x80) returned 0
	[0070.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POST98SP.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\post98sp.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4806
	os_tid = 0x5748

	[0070.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV", dwFileAttributes=0x80) returned 0
	[0070.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcard.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.184] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4807
	os_tid = 0x574c

	[0070.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML", dwFileAttributes=0x80) returned 0
	[0070.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCARD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcard.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4808
	os_tid = 0x5750

	[0070.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC", dwFileAttributes=0x80) returned 0
	[0070.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcd11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4809
	os_tid = 0x5754

	[0070.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC", dwFileAttributes=0x80) returned 0
	[0070.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\POSTCD98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\postcd98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4810
	os_tid = 0x5758

	[0070.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC", dwFileAttributes=0x80) returned 0
	[0070.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROG98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\prog98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4811
	os_tid = 0x575c

	[0070.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV", dwFileAttributes=0x80) returned 0
	[0070.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\program.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4812
	os_tid = 0x5760

	[0070.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML", dwFileAttributes=0x80) returned 0
	[0070.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PROGRAM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\program.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4813
	os_tid = 0x5764

	[0070.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC", dwFileAttributes=0x80) returned 0
	[0070.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS10TARG.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps10targ.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.191] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4814
	os_tid = 0x5768

	[0070.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC", dwFileAttributes=0x80) returned 0
	[0070.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS2SWOOS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps2swoos.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4815
	os_tid = 0x576c

	[0070.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC", dwFileAttributes=0x80) returned 0
	[0070.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PS9CRNRH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\ps9crnrh.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.193] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4816
	os_tid = 0x5770

	[0070.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV", dwFileAttributes=0x80) returned 0
	[0070.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pullquotebb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4817
	os_tid = 0x5774

	[0070.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC", dwFileAttributes=0x80) returned 0
	[0070.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULLQUOTEBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pullquotebb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4818
	os_tid = 0x5778

	[0070.196] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC", dwFileAttributes=0x80) returned 0
	[0070.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\PULQOT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\pulqot98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.196] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4819
	os_tid = 0x577c

	[0070.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV", dwFileAttributes=0x80) returned 0
	[0070.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\qp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.197] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4820
	os_tid = 0x5780

	[0070.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML", dwFileAttributes=0x80) returned 0
	[0070.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\qp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4821
	os_tid = 0x5784

	[0070.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC", dwFileAttributes=0x80) returned 0
	[0070.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\QUIKPUBS.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\quikpubs.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4822
	os_tid = 0x5788

	[0070.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC", dwFileAttributes=0x80) returned 0
	[0070.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\REPTWIZ.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\reptwiz.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.199] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4823
	os_tid = 0x578c

	[0070.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC", dwFileAttributes=0x80) returned 0
	[0070.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RES98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\res98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.200] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4824
	os_tid = 0x5790

	[0070.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC", dwFileAttributes=0x80) returned 0
	[0070.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.201] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4825
	os_tid = 0x5794

	[0070.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV", dwFileAttributes=0x80) returned 0
	[0070.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resume.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4826
	os_tid = 0x5798

	[0070.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML", dwFileAttributes=0x80) returned 0
	[0070.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RESUME.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\resume.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4827
	os_tid = 0x579c

	[0070.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC", dwFileAttributes=0x80) returned 0
	[0070.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\RSPMECH.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\rspmech.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.204] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4828
	os_tid = 0x57a0

	[0070.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC", dwFileAttributes=0x80) returned 0
	[0070.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDBAR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidbar98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.205] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4829
	os_tid = 0x57a4

	[0070.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV", dwFileAttributes=0x80) returned 0
	[0070.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4830
	os_tid = 0x57a8

	[0070.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC", dwFileAttributes=0x80) returned 0
	[0070.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4831
	os_tid = 0x57ac

	[0070.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV", dwFileAttributes=0x80) returned 0
	[0070.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.208] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4832
	os_tid = 0x57b0

	[0070.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC", dwFileAttributes=0x80) returned 0
	[0070.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIDEBARVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sidebarvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.209] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4833
	os_tid = 0x57b4

	[0070.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV", dwFileAttributes=0x80) returned 0
	[0070.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4834
	os_tid = 0x57b8

	[0070.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML", dwFileAttributes=0x80) returned 0
	[0070.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.211] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4835
	os_tid = 0x57bc

	[0070.212] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC", dwFileAttributes=0x80) returned 0
	[0070.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGN98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\sign98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.212] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4836
	os_tid = 0x57c0

	[0070.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC", dwFileAttributes=0x80) returned 0
	[0070.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SIGNHM.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\signhm.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4837
	os_tid = 0x57c4

	[0070.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC", dwFileAttributes=0x80) returned 0
	[0070.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\SNIPE.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\snipe.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4838
	os_tid = 0x57c8

	[0070.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV", dwFileAttributes=0x80) returned 0
	[0070.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storybb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4839
	os_tid = 0x57cc

	[0070.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC", dwFileAttributes=0x80) returned 0
	[0070.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storybb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.216] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4840
	os_tid = 0x57d0

	[0070.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV", dwFileAttributes=0x80) returned 0
	[0070.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storyvertbb.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.256] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4841
	os_tid = 0x57d4

	[0070.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC", dwFileAttributes=0x80) returned 0
	[0070.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STORYVERTBB.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\storyvertbb.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.261] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4842
	os_tid = 0x57d8

	[0070.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC", dwFileAttributes=0x80) returned 0
	[0070.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\STRBRST.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\strbrst.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.266] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4843
	os_tid = 0x57dc

	[0070.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC", dwFileAttributes=0x80) returned 0
	[0070.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TEAROFF.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\tearoff.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.271] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4844
	os_tid = 0x57e0

	[0070.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC", dwFileAttributes=0x80) returned 0
	[0070.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\TOC98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\toc98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.275] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4845
	os_tid = 0x57e4

	[0070.275] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC", dwFileAttributes=0x80) returned 0
	[0070.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WCOMP98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wcomp98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.278] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4846
	os_tid = 0x57e8

	[0070.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC", dwFileAttributes=0x80) returned 0
	[0070.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEB11.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\web11.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4847
	os_tid = 0x57ec

	[0070.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC", dwFileAttributes=0x80) returned 0
	[0070.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBCALSO.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webcalso.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4848
	os_tid = 0x57f0

	[0070.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC", dwFileAttributes=0x80) returned 0
	[0070.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBEMAIL.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webemail.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4849
	os_tid = 0x57f4

	[0070.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC", dwFileAttributes=0x80) returned 0
	[0070.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHED98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webhed98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.299] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4850
	os_tid = 0x57f8

	[0070.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC", dwFileAttributes=0x80) returned 0
	[0070.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBHOME.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webhome.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.304] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4851
	os_tid = 0x57fc

	[0070.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC", dwFileAttributes=0x80) returned 0
	[0070.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBLINK.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\weblink.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.308] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4852
	os_tid = 0x5804

	[0070.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV", dwFileAttributes=0x80) returned 0
	[0070.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webpage.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.318] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4853
	os_tid = 0x5808

	[0070.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML", dwFileAttributes=0x80) returned 0
	[0070.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WEBPAGE.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\webpage.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4854
	os_tid = 0x580c

	[0070.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV", dwFileAttributes=0x80) returned 0
	[0070.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\withcomp.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4855
	os_tid = 0x5810

	[0070.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML", dwFileAttributes=0x80) returned 0
	[0070.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WITHCOMP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\withcomp.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.333] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4856
	os_tid = 0x5814

	[0070.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV", dwFileAttributes=0x80) returned 0
	[0070.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.DPV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wordrep.dpv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4857
	os_tid = 0x5818

	[0070.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML", dwFileAttributes=0x80) returned 0
	[0070.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WORDREP.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wordrep.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4858
	os_tid = 0x581c

	[0070.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC", dwFileAttributes=0x80) returned 0
	[0070.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WPULQT98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wpulqt98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.352] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4859
	os_tid = 0x5820

	[0070.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC", dwFileAttributes=0x80) returned 0
	[0070.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PUBWIZ\\WSIDBR98.POC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pubwiz\\wsidbr98.poc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4860
	os_tid = 0x5824

	[0070.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", dwFileAttributes=0x80) returned 0
	[0070.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4861
	os_tid = 0x5828

	[0070.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri", dwFileAttributes=0x80) returned 0
	[0070.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Resources.pri" (normalized: "c:\\program files\\microsoft office\\root\\office16\\resources.pri"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.361] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4862
	os_tid = 0x582c

	[0070.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", dwFileAttributes=0x80) returned 0
	[0070.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.363] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4863
	os_tid = 0x5830

	[0070.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS", dwFileAttributes=0x80) returned 0
	[0070.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SAMPLES\\SOLVSAMP.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\samples\\solvsamp.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4864
	os_tid = 0x5834

	[0070.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", dwFileAttributes=0x80) returned 0
	[0070.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.367] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4865
	os_tid = 0x5838

	[0070.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", dwFileAttributes=0x80) returned 0
	[0070.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.369] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4866
	os_tid = 0x583c

	[0070.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\actdir_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4867
	os_tid = 0x5840

	[0070.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ACTDIR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\actdir_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4868
	os_tid = 0x5844

	[0070.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ado_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4869
	os_tid = 0x5848

	[0070.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ado_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4870
	os_tid = 0x584c

	[0070.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ads_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4871
	os_tid = 0x5850

	[0070.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ADS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ads_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4872
	os_tid = 0x5854

	[0070.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\alarm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.432] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4873
	os_tid = 0x5858

	[0070.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ALARM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\alarm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4874
	os_tid = 0x585c

	[0070.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\annot_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.435] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4875
	os_tid = 0x5860

	[0070.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ANNOT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\annot_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.436] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4876
	os_tid = 0x5864

	[0070.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4877
	os_tid = 0x5868

	[0070.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.439] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4878
	os_tid = 0x586c

	[0070.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.440] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4879
	os_tid = 0x5870

	[0070.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\APPL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\appl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.442] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4880
	os_tid = 0x5874

	[0070.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.444] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4881
	os_tid = 0x5878

	[0070.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ARROWS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\arrows_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.446] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4882
	os_tid = 0x587c

	[0070.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\associations_uml_class_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.448] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4883
	os_tid = 0x5880

	[0070.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ASSOCIATIONS_UML_CLASS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\associations_uml_class_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.449] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4884
	os_tid = 0x5884

	[0070.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.452] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4885
	os_tid = 0x5888

	[0070.453] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.453] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4886
	os_tid = 0x588c

	[0070.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_several_outcomes_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.455] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4887
	os_tid = 0x5890

	[0070.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SEVERAL_OUTCOMES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_several_outcomes_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.456] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4888
	os_tid = 0x5894

	[0070.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_subprocess_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.457] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4889
	os_tid = 0x5898

	[0070.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_SUBPROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_subprocess_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4890
	os_tid = 0x589c

	[0070.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.459] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4891
	os_tid = 0x58a0

	[0070.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\AUDIT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\audit_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.460] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4892
	os_tid = 0x58a4

	[0070.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.461] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4893
	os_tid = 0x58a8

	[0070.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.463] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4894
	os_tid = 0x58ac

	[0070.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.498] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4895
	os_tid = 0x58b0

	[0070.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4896
	os_tid = 0x58b4

	[0070.500] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basiccircuit_diagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4897
	os_tid = 0x58b8

	[0070.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICCIRCUIT_DIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basiccircuit_diagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.502] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4898
	os_tid = 0x58bc

	[0070.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicd_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.504] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4899
	os_tid = 0x58c0

	[0070.504] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicd_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.505] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4900
	os_tid = 0x58c4

	[0070.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicelectrical_diagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.506] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4901
	os_tid = 0x58c8

	[0070.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASICELECTRICAL_DIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basicelectrical_diagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.508] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4902
	os_tid = 0x58cc

	[0070.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_auditdiagram_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.510] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4903
	os_tid = 0x58d0

	[0070.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_AUDITDIAGRAM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_auditdiagram_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.511] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4904
	os_tid = 0x58d4

	[0070.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_ganttchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.512] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4905
	os_tid = 0x58d8

	[0070.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_GANTTCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_ganttchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.513] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4906
	os_tid = 0x58dc

	[0070.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_home_network_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.514] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4907
	os_tid = 0x58e0

	[0070.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_HOME_NETWORK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_home_network_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.515] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4908
	os_tid = 0x58e4

	[0070.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.517] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4909
	os_tid = 0x58e8

	[0070.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.518] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4910
	os_tid = 0x58ec

	[0070.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_umlsequence_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.520] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4911
	os_tid = 0x58f0

	[0070.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BASIC_UMLSEQUENCE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\basic_umlsequence_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.521] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4912
	os_tid = 0x58f4

	[0070.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_dec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4913
	os_tid = 0x58f8

	[0070.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_DEC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_dec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.523] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4914
	os_tid = 0x58fc

	[0070.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_grp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.526] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4915
	os_tid = 0x5900

	[0070.526] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BA_GRP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ba_grp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.526] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4916
	os_tid = 0x5904

	[0070.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bckgrn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.528] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4917
	os_tid = 0x5908

	[0070.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BCKGRN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bckgrn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.530] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4918
	os_tid = 0x590c

	[0070.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.532] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4919
	os_tid = 0x5910

	[0070.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.534] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4920
	os_tid = 0x5914

	[0070.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.536] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4921
	os_tid = 0x5918

	[0070.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDCOR_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldcor_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.538] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4922
	os_tid = 0x591c

	[0070.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG", dwFileAttributes=0x80) returned 0
	[0070.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.DWG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldgplan.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.541] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4923
	os_tid = 0x5920

	[0070.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG", dwFileAttributes=0x80) returned 0
	[0070.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLDGPLAN.JPG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bldgplan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.543] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4924
	os_tid = 0x5924

	[0070.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block3_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.588] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4925
	os_tid = 0x5928

	[0070.589] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK3_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block3_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.590] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4926
	os_tid = 0x592c

	[0070.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.592] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4927
	os_tid = 0x5930

	[0070.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.594] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4928
	os_tid = 0x5934

	[0070.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.596] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4929
	os_tid = 0x5938

	[0070.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blockp_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.597] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4930
	os_tid = 0x593c

	[0070.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG", dwFileAttributes=0x80) returned 0
	[0070.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCKS.DWG" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\blocks.dwg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.598] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4931
	os_tid = 0x5940

	[0070.599] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.600] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4932
	os_tid = 0x5944

	[0070.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.601] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4933
	os_tid = 0x5948

	[0070.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.603] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4934
	os_tid = 0x594c

	[0070.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BLOCK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\block_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.604] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4935
	os_tid = 0x5950

	[0070.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bordrs_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.605] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4936
	os_tid = 0x5954

	[0070.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BORDRS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bordrs_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.607] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4937
	os_tid = 0x5958

	[0070.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_address_change_process_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.609] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4938
	os_tid = 0x595c

	[0070.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_ADDRESS_CHANGE_PROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_address_change_process_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.611] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4939
	os_tid = 0x5960

	[0070.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.612] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4940
	os_tid = 0x5964

	[0070.613] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.614] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4941
	os_tid = 0x5968

	[0070.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_gateway_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.615] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4942
	os_tid = 0x596c

	[0070.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_GATEWAY_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_gateway_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.616] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4943
	os_tid = 0x5970

	[0070.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_multiple_roles_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.619] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4944
	os_tid = 0x5974

	[0070.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_PROCESS_MULTIPLE_ROLES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_process_multiple_roles_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.621] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4945
	os_tid = 0x5978

	[0070.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.624] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4946
	os_tid = 0x597c

	[0070.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPMN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpmn_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.626] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4947
	os_tid = 0x5980

	[0070.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpres_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.627] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4948
	os_tid = 0x5984

	[0070.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BPRES_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bpres_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.630] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4949
	os_tid = 0x5988

	[0070.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML", dwFileAttributes=0x80) returned 0
	[0070.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BRAINSTM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\brainstm.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.634] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4950
	os_tid = 0x598c

	[0070.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4951
	os_tid = 0x5990

	[0070.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.638] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4952
	os_tid = 0x5994

	[0070.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.641] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4953
	os_tid = 0x5998

	[0070.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BSTORM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bstorm_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.643] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4954
	os_tid = 0x599c

	[0070.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4955
	os_tid = 0x59a0

	[0070.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.648] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4956
	os_tid = 0x59a4

	[0070.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4957
	os_tid = 0x59a8

	[0070.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\BTHKT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\bthkt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.653] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4958
	os_tid = 0x59ac

	[0070.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4959
	os_tid = 0x59b0

	[0070.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.657] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4960
	os_tid = 0x59b4

	[0070.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.659] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4961
	os_tid = 0x59b8

	[0070.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CABNT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cabnt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4962
	os_tid = 0x59bc

	[0070.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.663] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4963
	os_tid = 0x59c0

	[0070.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.666] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4964
	os_tid = 0x59c4

	[0070.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.670] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4965
	os_tid = 0x59c8

	[0070.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALNDR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calndr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4966
	os_tid = 0x59cc

	[0070.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calout_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.713] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4967
	os_tid = 0x59d0

	[0070.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CALOUT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\calout_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.715] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4968
	os_tid = 0x59d4

	[0070.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4969
	os_tid = 0x59d8

	[0070.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.717] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4970
	os_tid = 0x59dc

	[0070.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4971
	os_tid = 0x59e0

	[0070.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CAUSEF_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\causef_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4972
	os_tid = 0x59e4

	[0070.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ceilpl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.721] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4973
	os_tid = 0x59e8

	[0070.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CEILPL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ceilpl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.722] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4974
	os_tid = 0x59ec

	[0070.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_horizontal_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4975
	os_tid = 0x59f0

	[0070.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_HORIZONTAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_horizontal_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.724] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4976
	os_tid = 0x59f4

	[0070.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_sharedprocess_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.725] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4977
	os_tid = 0x59f8

	[0070.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_SHAREDPROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_sharedprocess_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.726] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4978
	os_tid = 0x59fc

	[0070.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_vertical_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.727] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4979
	os_tid = 0x5a00

	[0070.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CFF_VERTICAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cff_vertical_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.728] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4980
	os_tid = 0x5a04

	[0070.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.730] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4981
	os_tid = 0x5a08

	[0070.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4982
	os_tid = 0x5a0c

	[0070.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4983
	os_tid = 0x5a10

	[0070.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\chart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4984
	os_tid = 0x5a14

	[0070.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4985
	os_tid = 0x5a18

	[0070.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4986
	os_tid = 0x5a1c

	[0070.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4987
	os_tid = 0x5a20

	[0070.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMOLE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comole_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4988
	os_tid = 0x5a24

	[0070.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compln_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4989
	os_tid = 0x5a28

	[0070.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPLN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compln_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4990
	os_tid = 0x5a2c

	[0070.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4991
	os_tid = 0x5a30

	[0070.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\compme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4992
	os_tid = 0x5a34

	[0070.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comps_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4993
	os_tid = 0x5a38

	[0070.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\COMPS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\comps_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.791] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4994
	os_tid = 0x5a3c

	[0070.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\conlog_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4995
	os_tid = 0x5a40

	[0070.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONLOG_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\conlog_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4996
	os_tid = 0x5a44

	[0070.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\connec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.798] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4997
	os_tid = 0x5a48

	[0070.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CONNEC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\connec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.799] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4998
	os_tid = 0x5a4c

	[0070.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.801] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 4999
	os_tid = 0x5a50

	[0070.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.802] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5000
	os_tid = 0x5a54

	[0070.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.804] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5001
	os_tid = 0x5a58

	[0070.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\CUBICL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\cubicl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.807] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5002
	os_tid = 0x5a5c

	[0070.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5003
	os_tid = 0x5a60

	[0070.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5004
	os_tid = 0x5a64

	[0070.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5005
	os_tid = 0x5a68

	[0070.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5006
	os_tid = 0x5a6c

	[0070.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datmod_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5007
	os_tid = 0x5a70

	[0070.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DATMOD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\datmod_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5008
	os_tid = 0x5a74

	[0070.829] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.830] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5009
	os_tid = 0x5a78

	[0070.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5010
	os_tid = 0x5a7c

	[0070.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5011
	os_tid = 0x5a80

	[0070.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCHEN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbchen_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.835] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5012
	os_tid = 0x5a84

	[0070.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.837] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5013
	os_tid = 0x5a88

	[0070.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.838] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5014
	os_tid = 0x5a8c

	[0070.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.842] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5015
	os_tid = 0x5a90

	[0070.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBCROW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbcrow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.844] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5016
	os_tid = 0x5a94

	[0070.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.845] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5017
	os_tid = 0x5a98

	[0070.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.846] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5018
	os_tid = 0x5a9c

	[0070.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5019
	os_tid = 0x5aa0

	[0070.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBIDEF1X_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbidef1x_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.848] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5020
	os_tid = 0x5aa4

	[0070.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.850] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5021
	os_tid = 0x5aa8

	[0070.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.851] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5022
	os_tid = 0x5aac

	[0070.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.853] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5023
	os_tid = 0x5ab0

	[0070.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DBUML_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dbuml_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.901] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5024
	os_tid = 0x5ab4

	[0070.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\deptorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5025
	os_tid = 0x5ab8

	[0070.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DEPTORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\deptorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.905] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5026
	os_tid = 0x5abc

	[0070.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dgicon_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.907] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5027
	os_tid = 0x5ac0

	[0070.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DGICON_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dgicon_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.908] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5028
	os_tid = 0x5ac4

	[0070.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMARC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimarc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.910] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5029
	os_tid = 0x5ac8

	[0070.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimeng_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.911] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5030
	os_tid = 0x5acc

	[0070.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DIMENG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dimeng_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.913] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5031
	os_tid = 0x5ad0

	[0070.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\document_approval_workflow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.915] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5032
	os_tid = 0x5ad4

	[0070.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DOCUMENT_APPROVAL_WORKFLOW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\document_approval_workflow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5033
	os_tid = 0x5ad8

	[0070.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drawtl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.920] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5034
	os_tid = 0x5adc

	[0070.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRAWTL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drawtl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.922] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5035
	os_tid = 0x5ae0

	[0070.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.923] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5036
	os_tid = 0x5ae4

	[0070.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.925] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5037
	os_tid = 0x5ae8

	[0070.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.926] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5038
	os_tid = 0x5aec

	[0070.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DRILLD_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\drilld_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.928] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5039
	os_tid = 0x5af0

	[0070.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.929] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5040
	os_tid = 0x5af4

	[0070.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.931] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5041
	os_tid = 0x5af8

	[0070.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.934] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5042
	os_tid = 0x5afc

	[0070.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNET_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnet_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.935] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5043
	os_tid = 0x5b00

	[0070.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.936] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5044
	os_tid = 0x5b04

	[0070.937] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.938] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5045
	os_tid = 0x5b08

	[0070.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.939] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5046
	os_tid = 0x5b0c

	[0070.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DTLNME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dtlnme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.941] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5047
	os_tid = 0x5b10

	[0070.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dvcall_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5048
	os_tid = 0x5b14

	[0070.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DVCALL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dvcall_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5049
	os_tid = 0x5b18

	[0070.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dwgcnv_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.948] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5050
	os_tid = 0x5b1c

	[0070.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\DWGCNV_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\dwgcnv_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.949] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5051
	os_tid = 0x5b20

	[0070.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5052
	os_tid = 0x5b24

	[0070.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5053
	os_tid = 0x5b28

	[0070.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.956] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5054
	os_tid = 0x5b2c

	[0070.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0070.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECHIP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eechip_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5055
	os_tid = 0x5b30

	[0070.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eecomp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5056
	os_tid = 0x5b34

	[0070.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EECOMP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eecomp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.961] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5057
	os_tid = 0x5b38

	[0070.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.963] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5058
	os_tid = 0x5b3c

	[0070.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.964] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5059
	os_tid = 0x5b40

	[0070.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0070.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5060
	os_tid = 0x5b44

	[0070.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0070.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEFUND_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eefund_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5061
	os_tid = 0x5b48

	[0070.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX", dwFileAttributes=0x80) returned 0
	[0070.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eegenr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0070.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5062
	os_tid = 0x5b4c

	[0071.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEGENR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eegenr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.011] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5063
	os_tid = 0x5b50

	[0071.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeics_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.014] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5064
	os_tid = 0x5b54

	[0071.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEICS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeics_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.015] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5065
	os_tid = 0x5b58

	[0071.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemain_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.016] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5066
	os_tid = 0x5b5c

	[0071.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAIN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemain_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.018] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5067
	os_tid = 0x5b60

	[0071.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAPS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAPS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemaps_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.020] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5068
	os_tid = 0x5b64

	[0071.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAPS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMAPS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemaps_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5069
	os_tid = 0x5b68

	[0071.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMECH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMECH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemech_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.022] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5070
	os_tid = 0x5b6c

	[0071.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMECH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEMECH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eemech_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5071
	os_tid = 0x5b70

	[0071.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eepath_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.026] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5072
	os_tid = 0x5b74

	[0071.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eepath_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.028] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5073
	os_tid = 0x5b78

	[0071.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eepath_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.029] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5074
	os_tid = 0x5b7c

	[0071.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEPATH_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eepath_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5075
	os_tid = 0x5b80

	[0071.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eequal_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5076
	os_tid = 0x5b84

	[0071.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eequal_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.033] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5077
	os_tid = 0x5b88

	[0071.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eequal_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.034] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5078
	os_tid = 0x5b8c

	[0071.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEQUAL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eequal_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5079
	os_tid = 0x5b90

	[0071.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eesemi_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.037] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5080
	os_tid = 0x5b94

	[0071.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eesemi_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5081
	os_tid = 0x5b98

	[0071.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eesemi_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.039] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5082
	os_tid = 0x5b9c

	[0071.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESEMI_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eesemi_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.040] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5083
	os_tid = 0x5ba0

	[0071.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeswch_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.042] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5084
	os_tid = 0x5ba4

	[0071.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeswch_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.043] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5085
	os_tid = 0x5ba8

	[0071.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeswch_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.045] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5086
	os_tid = 0x5bac

	[0071.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESWCH_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeswch_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.047] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5087
	os_tid = 0x5bb0

	[0071.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESYS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESYS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eesys_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.049] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5088
	os_tid = 0x5bb4

	[0071.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESYS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EESYS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eesys_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.052] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5089
	os_tid = 0x5bb8

	[0071.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETCOM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETCOM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eetcom_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.054] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5090
	os_tid = 0x5bbc

	[0071.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETCOM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETCOM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eetcom_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.057] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5091
	os_tid = 0x5bc0

	[0071.057] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETERM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETERM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeterm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.058] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5092
	os_tid = 0x5bc4

	[0071.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETERM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETERM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eeterm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.059] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5093
	os_tid = 0x5bc8

	[0071.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETRAN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETRAN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eetran_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.132] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5094
	os_tid = 0x5bcc

	[0071.133] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETRAN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EETRAN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eetran_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.133] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5095
	os_tid = 0x5bd0

	[0071.134] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEVHF_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEVHF_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eevhf_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.135] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5096
	os_tid = 0x5bd4

	[0071.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEVHF_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EEVHF_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eevhf_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.135] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5097
	os_tid = 0x5bd8

	[0071.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eletel_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.136] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5098
	os_tid = 0x5bdc

	[0071.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eletel_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.138] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5099
	os_tid = 0x5be0

	[0071.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eletel_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.139] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5100
	os_tid = 0x5be4

	[0071.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ELETEL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\eletel_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.140] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5101
	os_tid = 0x5be8

	[0071.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EMBELL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EMBELL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\embell_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.142] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5102
	os_tid = 0x5bec

	[0071.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EMBELL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EMBELL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\embell_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.144] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5103
	os_tid = 0x5bf0

	[0071.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\entapp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.144] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5104
	os_tid = 0x5bf4

	[0071.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\entapp_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.146] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5105
	os_tid = 0x5bf8

	[0071.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\entapp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.147] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5106
	os_tid = 0x5bfc

	[0071.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ENTAPP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\entapp_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5107
	os_tid = 0xdf0

	[0071.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\epc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5108
	os_tid = 0x5c04

	[0071.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\epc_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.153] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5109
	os_tid = 0x5c08

	[0071.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\epc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5110
	os_tid = 0x5c0c

	[0071.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EPC_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\epc_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5111
	os_tid = 0x5c10

	[0071.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EXCOBJ_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EXCOBJ_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\excobj_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.156] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5112
	os_tid = 0x5c14

	[0071.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EXCOBJ_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\EXCOBJ_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\excobj_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5113
	os_tid = 0x5c18

	[0071.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN1_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN1_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fastn1_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.159] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5114
	os_tid = 0x5c1c

	[0071.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN1_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN1_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fastn1_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5115
	os_tid = 0x5c20

	[0071.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN2_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fastn2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5116
	os_tid = 0x5c24

	[0071.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN2_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FASTN2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fastn2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5117
	os_tid = 0x5c28

	[0071.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fault_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.165] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5118
	os_tid = 0x5c2c

	[0071.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fault_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5119
	os_tid = 0x5c30

	[0071.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fault_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5120
	os_tid = 0x5c34

	[0071.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FAULT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fault_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5121
	os_tid = 0x5c38

	[0071.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLOSHP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLOSHP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\floshp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5122
	os_tid = 0x5c3c

	[0071.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLOSHP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLOSHP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\floshp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5123
	os_tid = 0x5c40

	[0071.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLRPLN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLRPLN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\flrpln_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5124
	os_tid = 0x5c44

	[0071.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLRPLN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FLRPLN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\flrpln_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5125
	os_tid = 0x5c48

	[0071.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPALL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPALL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpall_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5126
	os_tid = 0x5c4c

	[0071.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPALL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPALL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpall_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5127
	os_tid = 0x5c50

	[0071.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPASSM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPASSM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpassm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5128
	os_tid = 0x5c54

	[0071.182] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPASSM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPASSM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpassm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.183] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5129
	os_tid = 0x5c58

	[0071.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPEQP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPEQP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpeqp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.185] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5130
	os_tid = 0x5c5c

	[0071.186] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPEQP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPEQP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpeqp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.186] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5131
	os_tid = 0x5c60

	[0071.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPVALV_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPVALV_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpvalv_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.187] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5132
	os_tid = 0x5c64

	[0071.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPVALV_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FPVALV_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\fpvalv_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.188] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5133
	os_tid = 0x5c68

	[0071.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FREEQP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FREEQP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\freeqp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.189] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5134
	os_tid = 0x5c6c

	[0071.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FREEQP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FREEQP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\freeqp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5135
	os_tid = 0x5c70

	[0071.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\furn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.192] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5136
	os_tid = 0x5c74

	[0071.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\furn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.194] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5137
	os_tid = 0x5c78

	[0071.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\furn_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.195] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5138
	os_tid = 0x5c7c

	[0071.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\FURN_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\furn_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.196] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5139
	os_tid = 0x5c80

	[0071.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANESA_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANESA_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ganesa_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.198] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5140
	os_tid = 0x5c84

	[0071.199] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANESA_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANESA_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ganesa_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.199] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5141
	os_tid = 0x5c88

	[0071.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\gantt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.200] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5142
	os_tid = 0x5c8c

	[0071.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\gantt_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.202] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5143
	os_tid = 0x5c90

	[0071.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\gantt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.205] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5144
	os_tid = 0x5c94

	[0071.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GANTT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\gantt_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.207] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5145
	os_tid = 0x5c98

	[0071.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\garden_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.209] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5146
	os_tid = 0x5c9c

	[0071.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\garden_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.210] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5147
	os_tid = 0x5ca0

	[0071.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\garden_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.212] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5148
	os_tid = 0x5ca4

	[0071.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GARDEN_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\garden_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.214] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5149
	os_tid = 0x5ca8

	[0071.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GDT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GDT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\gdt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.215] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5150
	os_tid = 0x5cac

	[0071.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GDT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\GDT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\gdt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.216] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5151
	os_tid = 0x5cb0

	[0071.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HIERARCHICALORGCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HIERARCHICALORGCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hierarchicalorgchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.218] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5152
	os_tid = 0x5cb4

	[0071.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HIERARCHICALORGCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HIERARCHICALORGCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hierarchicalorgchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.257] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5153
	os_tid = 0x5cb8

	[0071.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HOMPLN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HOMPLN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hompln_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5154
	os_tid = 0x5cbc

	[0071.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HOMPLN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HOMPLN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hompln_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.260] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5155
	os_tid = 0x5cc0

	[0071.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACCE_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACCE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvacce_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.261] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5156
	os_tid = 0x5cc4

	[0071.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACCE_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACCE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvacce_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.263] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5157
	os_tid = 0x5cc8

	[0071.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvacc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.264] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5158
	os_tid = 0x5ccc

	[0071.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvacc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.265] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5159
	os_tid = 0x5cd0

	[0071.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACD_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvacd_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.267] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5160
	os_tid = 0x5cd4

	[0071.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACD_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvacd_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.268] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5161
	os_tid = 0x5cd8

	[0071.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACEQ_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.269] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACEQ_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvaceq_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.269] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5162
	os_tid = 0x5cdc

	[0071.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACEQ_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVACEQ_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvaceq_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.270] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5163
	os_tid = 0x5ce0

	[0071.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVAC_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVAC_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvac_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.271] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5164
	os_tid = 0x5ce4

	[0071.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVAC_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\HVAC_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\hvac_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.273] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5165
	os_tid = 0x5ce8

	[0071.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\idef0_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.275] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5166
	os_tid = 0x5cec

	[0071.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\idef0_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.277] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5167
	os_tid = 0x5cf0

	[0071.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\idef0_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.278] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5168
	os_tid = 0x5cf4

	[0071.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IDEF0_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\idef0_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5169
	os_tid = 0x5cf8

	[0071.280] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTANN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTANN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\intann_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.281] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5170
	os_tid = 0x5cfc

	[0071.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTANN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTANN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\intann_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.282] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5171
	os_tid = 0x5d00

	[0071.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTERFACE_UML_CLASS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTERFACE_UML_CLASS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\interface_uml_class_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.283] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5172
	os_tid = 0x5d04

	[0071.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTERFACE_UML_CLASS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\INTERFACE_UML_CLASS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\interface_uml_class_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5173
	os_tid = 0x5d08

	[0071.286] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IRRIG_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IRRIG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\irrig_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.286] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5174
	os_tid = 0x5d0c

	[0071.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IRRIG_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\IRRIG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\irrig_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5175
	os_tid = 0x5d10

	[0071.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\itil_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.289] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5176
	os_tid = 0x5d14

	[0071.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\itil_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.290] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5177
	os_tid = 0x5d18

	[0071.290] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\itil_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5178
	os_tid = 0x5d1c

	[0071.292] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ITIL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\itil_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.294] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5179
	os_tid = 0x5d20

	[0071.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LANGLV_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LANGLV_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\langlv_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.295] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5180
	os_tid = 0x5d24

	[0071.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LANGLV_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LANGLV_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\langlv_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5181
	os_tid = 0x5d28

	[0071.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPDR_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPDR_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ldapdr_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.298] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5182
	os_tid = 0x5d2c

	[0071.299] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPDR_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPDR_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ldapdr_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.299] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5183
	os_tid = 0x5d30

	[0071.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPOB_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPOB_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ldapob_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.301] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5184
	os_tid = 0x5d34

	[0071.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPOB_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LDAPOB_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ldapob_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.302] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5185
	os_tid = 0x5d38

	[0071.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LEGEND_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LEGEND_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\legend_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.303] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5186
	os_tid = 0x5d3c

	[0071.303] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LEGEND_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LEGEND_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\legend_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.305] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5187
	os_tid = 0x5d40

	[0071.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LGND_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LGND_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\lgnd_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.307] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5188
	os_tid = 0x5d44

	[0071.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LGND_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LGND_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\lgnd_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.308] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5189
	os_tid = 0x5d48

	[0071.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LINPAT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LINPAT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\linpat_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.314] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5190
	os_tid = 0x5d4c

	[0071.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LINPAT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LINPAT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\linpat_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.315] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5191
	os_tid = 0x5d50

	[0071.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LNDMRK_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LNDMRK_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\lndmrk_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.316] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5192
	os_tid = 0x5d54

	[0071.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LNDMRK_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LNDMRK_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\lndmrk_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.318] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5193
	os_tid = 0x5d58

	[0071.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LOGIC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LOGIC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\logic_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.319] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5194
	os_tid = 0x5d5c

	[0071.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LOGIC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\LOGIC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\logic_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5195
	os_tid = 0x5d60

	[0071.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\map3d_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5196
	os_tid = 0x5d64

	[0071.322] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\map3d_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.323] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5197
	os_tid = 0x5d68

	[0071.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\map3d_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.325] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5198
	os_tid = 0x5d6c

	[0071.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP3D_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\map3d_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.326] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5199
	os_tid = 0x5d70

	[0071.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\map_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.327] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5200
	os_tid = 0x5d74

	[0071.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MAP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\map_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.328] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5201
	os_tid = 0x5d78

	[0071.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEALL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEALL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\meall_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5202
	os_tid = 0x5d7c

	[0071.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEALL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEALL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\meall_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5203
	os_tid = 0x5d80

	[0071.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEDIUMENTERPRISECORPNET_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEDIUMENTERPRISECORPNET_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\mediumenterprisecorpnet_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.331] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5204
	os_tid = 0x5d84

	[0071.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEDIUMENTERPRISECORPNET_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEDIUMENTERPRISECORPNET_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\mediumenterprisecorpnet_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.332] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5205
	os_tid = 0x5d88

	[0071.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEMOBJ_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEMOBJ_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\memobj_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5206
	os_tid = 0x5d8c

	[0071.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEMOBJ_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MEMOBJ_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\memobj_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.335] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5207
	os_tid = 0x5d90

	[0071.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\METRO_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\METRO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\metro_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.336] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5208
	os_tid = 0x5d94

	[0071.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\METRO_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\METRO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\metro_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5209
	os_tid = 0x5d98

	[0071.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\mrktdg_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5210
	os_tid = 0x5d9c

	[0071.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\mrktdg_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.341] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5211
	os_tid = 0x5da0

	[0071.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\mrktdg_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.344] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5212
	os_tid = 0x5da4

	[0071.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\MRKTDG_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\mrktdg_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.345] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5213
	os_tid = 0x5da8

	[0071.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netlme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.346] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5214
	os_tid = 0x5dac

	[0071.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netlme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5215
	os_tid = 0x5db0

	[0071.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLOC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLOC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netloc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.349] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5216
	os_tid = 0x5db4

	[0071.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLOC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETLOC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netloc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.351] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5217
	os_tid = 0x5db8

	[0071.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETRM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETRM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netrm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.353] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5218
	os_tid = 0x5dbc

	[0071.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETRM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETRM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netrm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5219
	os_tid = 0x5dc0

	[0071.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netsme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.356] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5220
	os_tid = 0x5dc4

	[0071.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netsme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.357] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5221
	os_tid = 0x5dc8

	[0071.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSYM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSYM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netsym_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5222
	os_tid = 0x5dcc

	[0071.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSYM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETSYM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netsym_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.360] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5223
	os_tid = 0x5dd0

	[0071.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETWME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETWME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netwme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5224
	os_tid = 0x5dd4

	[0071.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETWME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETWME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netwme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5225
	os_tid = 0x5dd8

	[0071.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETW_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netw_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.365] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5226
	os_tid = 0x5ddc

	[0071.366] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETW_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\NETW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\netw_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.366] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5227
	os_tid = 0x5de0

	[0071.368] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offacc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.368] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5228
	os_tid = 0x5de4

	[0071.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offacc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5229
	os_tid = 0x5de8

	[0071.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offacc_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5230
	os_tid = 0x5dec

	[0071.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFACC_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offacc_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5231
	os_tid = 0x5df0

	[0071.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offeqp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.375] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5232
	os_tid = 0x5df4

	[0071.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offeqp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.377] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5233
	os_tid = 0x5df8

	[0071.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offeqp_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5234
	os_tid = 0x5dfc

	[0071.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFEQP_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offeqp_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.380] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5235
	os_tid = 0x5e00

	[0071.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offfrn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5236
	os_tid = 0x5e04

	[0071.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offfrn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.383] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5237
	os_tid = 0x5e08

	[0071.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offfrn_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.384] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5238
	os_tid = 0x5e0c

	[0071.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFFRN_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offfrn_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.385] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5239
	os_tid = 0x5e10

	[0071.386] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFLYT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFLYT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offlyt_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.388] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5240
	os_tid = 0x5e14

	[0071.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFLYT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\OFFLYT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\offlyt_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5241
	os_tid = 0x5e18

	[0071.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ONPAGEFLOWCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ONPAGEFLOWCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\onpageflowchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5242
	os_tid = 0x5e1c

	[0071.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ONPAGEFLOWCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ONPAGEFLOWCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\onpageflowchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5243
	os_tid = 0x5e20

	[0071.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBLT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBLT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgblt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.394] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5244
	os_tid = 0x5e24

	[0071.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBLT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBLT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgblt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5245
	os_tid = 0x5e28

	[0071.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBND_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBND_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgbnd_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.396] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5246
	os_tid = 0x5e2c

	[0071.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBND_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGBND_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgbnd_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.399] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5247
	os_tid = 0x5e30

	[0071.400] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgch_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.400] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5248
	os_tid = 0x5e34

	[0071.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgch_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5249
	os_tid = 0x5e38

	[0071.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgch_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.403] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5250
	os_tid = 0x5e3c

	[0071.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCH_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgch_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.445] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5251
	os_tid = 0x5e40

	[0071.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCNS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCNS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgcns_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.447] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5252
	os_tid = 0x5e44

	[0071.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCNS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGCNS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgcns_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.450] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5253
	os_tid = 0x5e48

	[0071.451] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGDATA.TXT", dwFileAttributes=0x80) returned 0
	[0071.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGDATA.TXT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgdata.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.452] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5254
	os_tid = 0x5e4c

	[0071.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGDATA.XLS", dwFileAttributes=0x80) returned 0
	[0071.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGDATA.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgdata.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.454] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5255
	os_tid = 0x5e50

	[0071.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\orgico_m.vssx", dwFileAttributes=0x80) returned 0
	[0071.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\orgico_m.vssx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgico_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.456] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5256
	os_tid = 0x5e54

	[0071.457] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\orgico_u.vssx", dwFileAttributes=0x80) returned 0
	[0071.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\orgico_u.vssx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgico_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.458] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5257
	os_tid = 0x5e58

	[0071.460] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGNCH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGNCH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgnch_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.460] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5258
	os_tid = 0x5e5c

	[0071.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGNCH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGNCH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgnch_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.462] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5259
	os_tid = 0x5e60

	[0071.463] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPAN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPAN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgpan_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.463] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5260
	os_tid = 0x5e64

	[0071.464] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPAN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPAN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgpan_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.465] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5261
	os_tid = 0x5e68

	[0071.465] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPER_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPER_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgper_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5262
	os_tid = 0x5e6c

	[0071.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPER_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPER_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgper_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.467] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5263
	os_tid = 0x5e70

	[0071.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPET_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPET_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgpet_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.468] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5264
	os_tid = 0x5e74

	[0071.469] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPET_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPET_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgpet_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5265
	os_tid = 0x5e78

	[0071.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPIP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPIP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgpip_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.471] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5266
	os_tid = 0x5e7c

	[0071.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPIP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGPIP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgpip_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.472] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5267
	os_tid = 0x5e80

	[0071.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGSTO_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGSTO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgsto_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.473] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5268
	os_tid = 0x5e84

	[0071.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGSTO_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGSTO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgsto_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.474] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5269
	os_tid = 0x5e88

	[0071.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGTAC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGTAC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgtac_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.475] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5270
	os_tid = 0x5e8c

	[0071.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGTAC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGTAC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgtac_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.476] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5271
	os_tid = 0x5e90

	[0071.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGWIZ_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGWIZ_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgwiz_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.477] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5272
	os_tid = 0x5e94

	[0071.478] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGWIZ_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ORGWIZ_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\orgwiz_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5273
	os_tid = 0x5e98

	[0071.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBASLN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBASLN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pbasln_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.481] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5274
	os_tid = 0x5e9c

	[0071.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBASLN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBASLN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pbasln_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5275
	os_tid = 0x5ea0

	[0071.482] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBLANK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBLANK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pblank_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.483] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5276
	os_tid = 0x5ea4

	[0071.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBLANK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PBLANK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pblank_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.484] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5277
	os_tid = 0x5ea8

	[0071.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCRTSK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCRTSK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pcrtsk_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.485] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5278
	os_tid = 0x5eac

	[0071.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCRTSK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCRTSK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pcrtsk_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.486] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5279
	os_tid = 0x5eb0

	[0071.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCSHFL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCSHFL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pcshfl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.487] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5280
	os_tid = 0x5eb4

	[0071.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCSHFL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PCSHFL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pcshfl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.488] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5281
	os_tid = 0x5eb8

	[0071.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEANNT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEANNT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peannt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.489] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5282
	os_tid = 0x5ebc

	[0071.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEANNT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEANNT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peannt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.490] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5283
	os_tid = 0x5ec0

	[0071.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEDG_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEDG_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pedg_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5284
	os_tid = 0x5ec4

	[0071.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEDG_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEDG_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pedg_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.493] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5285
	os_tid = 0x5ec8

	[0071.494] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEEQP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEEQP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peeqp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.494] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5286
	os_tid = 0x5ecc

	[0071.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEEQP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEEQP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peeqp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5287
	os_tid = 0x5ed0

	[0071.496] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEHEAT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEHEAT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peheat_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.497] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5288
	os_tid = 0x5ed4

	[0071.497] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEHEAT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEHEAT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peheat_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.497] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5289
	os_tid = 0x5ed8

	[0071.498] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEINST_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEINST_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peinst_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.500] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5290
	os_tid = 0x5edc

	[0071.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEINST_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEINST_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\peinst_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.501] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5291
	os_tid = 0x5ee0

	[0071.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pepipe_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5292
	os_tid = 0x5ee4

	[0071.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pepipe_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.505] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5293
	os_tid = 0x5ee8

	[0071.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pepipe_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5294
	os_tid = 0x5eec

	[0071.508] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPIPE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pepipe_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.509] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5295
	os_tid = 0x5ef0

	[0071.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPUMP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPUMP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pepump_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.510] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5296
	os_tid = 0x5ef4

	[0071.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPUMP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEPUMP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pepump_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.511] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5297
	os_tid = 0x5ef8

	[0071.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\perime_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.513] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5298
	os_tid = 0x5efc

	[0071.514] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\perime_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.514] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5299
	os_tid = 0x5f00

	[0071.515] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIPH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIPH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\periph_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.515] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5300
	os_tid = 0x5f04

	[0071.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIPH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERIPH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\periph_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.516] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5301
	os_tid = 0x5f08

	[0071.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pert_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.517] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5302
	os_tid = 0x5f0c

	[0071.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pert_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.518] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5303
	os_tid = 0x5f10

	[0071.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pert_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.520] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5304
	os_tid = 0x5f14

	[0071.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PERT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pert_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.521] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5305
	os_tid = 0x5f18

	[0071.521] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVALV_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVALV_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pevalv_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.521] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5306
	os_tid = 0x5f1c

	[0071.522] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVALV_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVALV_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pevalv_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.522] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5307
	os_tid = 0x5f20

	[0071.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVESS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVESS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pevess_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.524] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5308
	os_tid = 0x5f24

	[0071.525] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVESS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PEVESS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pevess_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.526] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5309
	os_tid = 0x5f28

	[0071.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE1_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE1_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pipe1_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.527] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5310
	os_tid = 0x5f2c

	[0071.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE1_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE1_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pipe1_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.528] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5311
	os_tid = 0x5f30

	[0071.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE2_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pipe2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.529] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5312
	os_tid = 0x5f34

	[0071.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE2_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PIPE2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pipe2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.530] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5313
	os_tid = 0x5f38

	[0071.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plant_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.532] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5314
	os_tid = 0x5f3c

	[0071.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plant_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.533] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5315
	os_tid = 0x5f40

	[0071.534] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plant_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.534] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5316
	os_tid = 0x5f44

	[0071.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLANT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plant_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.535] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5317
	os_tid = 0x5f48

	[0071.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLMPIP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLMPIP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plmpip_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.537] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5318
	os_tid = 0x5f4c

	[0071.538] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLMPIP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLMPIP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plmpip_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.538] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5319
	os_tid = 0x5f50

	[0071.539] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLTLYT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLTLYT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pltlyt_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.540] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5320
	os_tid = 0x5f54

	[0071.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLTLYT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLTLYT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pltlyt_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.541] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5321
	os_tid = 0x5f58

	[0071.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLUMB_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLUMB_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plumb_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.544] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5322
	os_tid = 0x5f5c

	[0071.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLUMB_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PLUMB_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\plumb_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.545] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5323
	os_tid = 0x5f60

	[0071.546] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prkrd_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.546] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5324
	os_tid = 0x5f64

	[0071.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prkrd_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.547] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5325
	os_tid = 0x5f68

	[0071.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prkrd_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5326
	os_tid = 0x5f6c

	[0071.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRKRD_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prkrd_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.549] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5327
	os_tid = 0x5f70

	[0071.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSAVL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSAVL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prsavl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.551] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5328
	os_tid = 0x5f74

	[0071.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSAVL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSAVL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prsavl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.553] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5329
	os_tid = 0x5f78

	[0071.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSSTS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSSTS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prssts_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.555] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5330
	os_tid = 0x5f7c

	[0071.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSSTS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PRSSTS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\prssts_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5331
	os_tid = 0x5f80

	[0071.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PSTRCT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PSTRCT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pstrct_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.557] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5332
	os_tid = 0x5f84

	[0071.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PSTRCT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PSTRCT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\pstrct_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.559] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5333
	os_tid = 0x5f88

	[0071.560] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSCLD_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSCLD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptscld_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.561] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5334
	os_tid = 0x5f8c

	[0071.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSCLD_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSCLD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptscld_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5335
	os_tid = 0x5f90

	[0071.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptsint_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.563] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5336
	os_tid = 0x5f94

	[0071.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptsint_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5337
	os_tid = 0x5f98

	[0071.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptsint_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5338
	os_tid = 0x5f9c

	[0071.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSINT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptsint_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.567] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5339
	os_tid = 0x5fa0

	[0071.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSKST_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSKST_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptskst_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5340
	os_tid = 0x5fa4

	[0071.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSKST_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTSKST_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptskst_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.571] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5341
	os_tid = 0x5fa8

	[0071.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTUSCL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTUSCL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptuscl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.572] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5342
	os_tid = 0x5fac

	[0071.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTUSCL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\PTUSCL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ptuscl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5343
	os_tid = 0x5fb0

	[0071.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RACK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RACK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rack_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.575] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5344
	os_tid = 0x5fb4

	[0071.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RACK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RACK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rack_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.576] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5345
	os_tid = 0x5fb8

	[0071.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKEQP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKEQP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rckeqp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.577] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5346
	os_tid = 0x5fbc

	[0071.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKEQP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKEQP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rckeqp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5347
	os_tid = 0x5fc0

	[0071.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rcksme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5348
	os_tid = 0x5fc4

	[0071.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rcksme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5349
	os_tid = 0x5fc8

	[0071.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSVR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSVR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rcksvr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5350
	os_tid = 0x5fcc

	[0071.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSVR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RCKSVR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\rcksvr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.633] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5351
	os_tid = 0x5fd0

	[0071.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\recrt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.635] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5352
	os_tid = 0x5fd4

	[0071.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\recrt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5353
	os_tid = 0x5fd8

	[0071.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\recrt_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5354
	os_tid = 0x5fdc

	[0071.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECRT_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\recrt_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.639] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5355
	os_tid = 0x5fe0

	[0071.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECSHP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECSHP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\recshp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.640] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5356
	os_tid = 0x5fe4

	[0071.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECSHP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\RECSHP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\recshp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5357
	os_tid = 0x5fe8

	[0071.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\REGSTR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\REGSTR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\regstr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.643] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5358
	os_tid = 0x5fec

	[0071.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\REGSTR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\REGSTR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\regstr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.645] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5359
	os_tid = 0x5ff0

	[0071.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ROAD_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ROAD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\road_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.647] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5360
	os_tid = 0x5ff4

	[0071.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ROAD_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\ROAD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\road_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.650] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5361
	os_tid = 0x5ff8

	[0071.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCALL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCALL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdcall_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.653] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5362
	os_tid = 0x5ffc

	[0071.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCALL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCALL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdcall_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.654] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5363
	os_tid = 0xf84

	[0071.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCONT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCONT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdcont_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5364
	os_tid = 0x6004

	[0071.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCONT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDCONT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdcont_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.657] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5365
	os_tid = 0x6008

	[0071.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.658] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5366
	os_tid = 0x600c

	[0071.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdl_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5367
	os_tid = 0x6010

	[0071.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.662] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5368
	os_tid = 0x6014

	[0071.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SDL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sdl_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.663] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5369
	os_tid = 0x6018

	[0071.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SECACC_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SECACC_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\secacc_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5370
	os_tid = 0x601c

	[0071.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SECACC_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SECACC_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\secacc_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.666] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5371
	os_tid = 0x6020

	[0071.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVER_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVER_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\server_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.667] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5372
	os_tid = 0x6024

	[0071.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVER_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVER_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\server_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.669] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5373
	os_tid = 0x6028

	[0071.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\servme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.671] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5374
	os_tid = 0x602c

	[0071.672] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SERVME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\servme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5375
	os_tid = 0x6030

	[0071.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHAREPOINT_EXTRANETTOPOLOGY_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHAREPOINT_EXTRANETTOPOLOGY_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sharepoint_extranettopology_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.675] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5376
	os_tid = 0x6034

	[0071.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHAREPOINT_EXTRANETTOPOLOGY_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHAREPOINT_EXTRANETTOPOLOGY_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sharepoint_extranettopology_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.677] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5377
	os_tid = 0x6038

	[0071.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPMCH_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPMCH_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\shpmch_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.679] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5378
	os_tid = 0x603c

	[0071.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPMCH_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPMCH_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\shpmch_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.680] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5379
	os_tid = 0x6040

	[0071.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPREC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPREC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\shprec_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.681] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5380
	os_tid = 0x6044

	[0071.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPREC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPREC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\shprec_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.682] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5381
	os_tid = 0x6048

	[0071.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPSTR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPSTR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\shpstr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.684] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5382
	os_tid = 0x604c

	[0071.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPSTR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SHPSTR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\shpstr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.685] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5383
	os_tid = 0x6050

	[0071.686] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIMPLE_WORKFLOW_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIMPLE_WORKFLOW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\simple_workflow_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.686] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5384
	os_tid = 0x6054

	[0071.687] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIMPLE_WORKFLOW_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIMPLE_WORKFLOW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\simple_workflow_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5385
	os_tid = 0x6058

	[0071.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sitacc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.688] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5386
	os_tid = 0x605c

	[0071.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sitacc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.689] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5387
	os_tid = 0x6060

	[0071.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sitacc_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5388
	os_tid = 0x6064

	[0071.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITACC_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sitacc_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5389
	os_tid = 0x6068

	[0071.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITPLN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITPLN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sitpln_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5390
	os_tid = 0x606c

	[0071.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITPLN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SITPLN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sitpln_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5391
	os_tid = 0x6070

	[0071.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIXSIG_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIXSIG_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sixsig_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5392
	os_tid = 0x6074

	[0071.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIXSIG_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SIXSIG_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sixsig_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5393
	os_tid = 0x6078

	[0071.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SMALLMEDIUM_BUSINESS_NETWORK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SMALLMEDIUM_BUSINESS_NETWORK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\smallmedium_business_network_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.700] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5394
	os_tid = 0x607c

	[0071.701] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SMALLMEDIUM_BUSINESS_NETWORK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SMALLMEDIUM_BUSINESS_NETWORK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\smallmedium_business_network_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5395
	os_tid = 0x6080

	[0071.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPCPLN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPCPLN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spcpln_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5396
	os_tid = 0x6084

	[0071.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPCPLN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPCPLN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spcpln_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.704] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5397
	os_tid = 0x6088

	[0071.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPRBR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPRBR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sprbr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.706] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5398
	os_tid = 0x608c

	[0071.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPRBR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPRBR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sprbr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.709] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5399
	os_tid = 0x6090

	[0071.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW2_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW2_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spw2_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.710] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5400
	os_tid = 0x6094

	[0071.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW2_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW2_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spw2_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.712] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5401
	os_tid = 0x6098

	[0071.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA2_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwa2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.713] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5402
	os_tid = 0x609c

	[0071.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA2_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwa2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5403
	os_tid = 0x60a0

	[0071.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwa_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.719] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5404
	os_tid = 0x60a4

	[0071.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWA_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwa_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5405
	os_tid = 0x60a8

	[0071.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC2_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwc2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.721] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5406
	os_tid = 0x60ac

	[0071.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC2_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwc2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.722] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5407
	os_tid = 0x60b0

	[0071.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5408
	os_tid = 0x60b4

	[0071.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.725] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5409
	os_tid = 0x60b8

	[0071.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT2_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwt2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.727] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5410
	os_tid = 0x60bc

	[0071.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT2_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwt2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.728] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5411
	os_tid = 0x60c0

	[0071.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwt_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.729] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5412
	os_tid = 0x60c4

	[0071.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPWT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spwt_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5413
	os_tid = 0x60c8

	[0071.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spw_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5414
	os_tid = 0x60cc

	[0071.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SPW_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\spw_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5415
	os_tid = 0x60d0

	[0071.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSFLOW_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSFLOW_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ssflow_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5416
	os_tid = 0x60d4

	[0071.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSFLOW_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSFLOW_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ssflow_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5417
	os_tid = 0x60d8

	[0071.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSHOQ_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSHOQ_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sshoq_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5418
	os_tid = 0x60dc

	[0071.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSHOQ_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SSHOQ_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\sshoq_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5419
	os_tid = 0x60e0

	[0071.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBPROCESSFLOWCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBPROCESSFLOWCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\subprocessflowchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5420
	os_tid = 0x60e4

	[0071.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBPROCESSFLOWCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBPROCESSFLOWCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\subprocessflowchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5421
	os_tid = 0x60e8

	[0071.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBTASKS_GANTTCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBTASKS_GANTTCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\subtasks_ganttchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.748] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5422
	os_tid = 0x60ec

	[0071.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBTASKS_GANTTCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SUBTASKS_GANTTCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\subtasks_ganttchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5423
	os_tid = 0x60f0

	[0071.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SYMBOL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SYMBOL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\symbol_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.753] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5424
	os_tid = 0x60f4

	[0071.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SYMBOL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\SYMBOL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\symbol_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.755] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5425
	os_tid = 0x60f8

	[0071.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\Theme_m.vssx", dwFileAttributes=0x80) returned 0
	[0071.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\Theme_m.vssx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\theme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.756] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5426
	os_tid = 0x60fc

	[0071.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\Theme_u.vssx", dwFileAttributes=0x80) returned 0
	[0071.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\Theme_u.vssx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\theme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.758] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5427
	os_tid = 0x6100

	[0071.758] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELINE.MPP", dwFileAttributes=0x80) returned 0
	[0071.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELINE.MPP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeline.mpp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.759] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5428
	os_tid = 0x6104

	[0071.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_CYLINDRICAL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_CYLINDRICAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_cylindrical_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.760] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5429
	os_tid = 0x6108

	[0071.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_CYLINDRICAL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_CYLINDRICAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_cylindrical_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.763] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5430
	os_tid = 0x610c

	[0071.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_EXPANDEDBLOCK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_EXPANDEDBLOCK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_expandedblock_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.764] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5431
	os_tid = 0x6110

	[0071.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_EXPANDEDBLOCK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_EXPANDEDBLOCK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_expandedblock_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5432
	os_tid = 0x6114

	[0071.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.766] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5433
	os_tid = 0x6118

	[0071.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.767] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5434
	os_tid = 0x611c

	[0071.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.768] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5435
	os_tid = 0x6120

	[0071.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.770] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5436
	os_tid = 0x6124

	[0071.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_VERTICALBLOCK_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_VERTICALBLOCK_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_verticalblock_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.772] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5437
	os_tid = 0x6128

	[0071.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_VERTICALBLOCK_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TIMELN_VERTICALBLOCK_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\timeln_verticalblock_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.774] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5438
	os_tid = 0x612c

	[0071.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TITLE_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TITLE_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\title_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.775] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5439
	os_tid = 0x6130

	[0071.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TITLE_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TITLE_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\title_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.777] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5440
	os_tid = 0x6134

	[0071.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\tqm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.778] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5441
	os_tid = 0x6138

	[0071.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\tqm_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.779] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5442
	os_tid = 0x613c

	[0071.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\tqm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.781] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5443
	os_tid = 0x6140

	[0071.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TQM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\tqm_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5444
	os_tid = 0x6144

	[0071.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TRANSP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TRANSP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\transp_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5445
	os_tid = 0x6148

	[0071.858] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TRANSP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\TRANSP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\transp_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5446
	os_tid = 0x614c

	[0071.860] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uactme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.861] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5447
	os_tid = 0x6150

	[0071.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uactme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.864] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5448
	os_tid = 0x6154

	[0071.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uactme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.866] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5449
	os_tid = 0x6158

	[0071.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UACTME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uactme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.868] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5450
	os_tid = 0x615c

	[0071.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_INTERACTIONFRAME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_INTERACTIONFRAME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\umlsequence_interactionframe_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5451
	os_tid = 0x6160

	[0071.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_INTERACTIONFRAME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_INTERACTIONFRAME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\umlsequence_interactionframe_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.872] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5452
	os_tid = 0x6164

	[0071.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_LOOP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_LOOP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\umlsequence_loop_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5453
	os_tid = 0x6168

	[0071.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_LOOP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UMLSEQUENCE_LOOP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\umlsequence_loop_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.875] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5454
	os_tid = 0x616c

	[0071.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_CLASS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_CLASS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_class_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.876] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5455
	os_tid = 0x6170

	[0071.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_CLASS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_CLASS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_class_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.877] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5456
	os_tid = 0x6174

	[0071.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_DEPENDENCIES_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_DEPENDENCIES_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_usecase_dependencies_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.879] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5457
	os_tid = 0x6178

	[0071.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_DEPENDENCIES_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_DEPENDENCIES_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_usecase_dependencies_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.880] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5458
	os_tid = 0x617c

	[0071.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_usecase_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.881] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5459
	os_tid = 0x6180

	[0071.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_SUBSYSTEM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_SUBSYSTEM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_usecase_subsystem_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.883] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5460
	os_tid = 0x6184

	[0071.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_SUBSYSTEM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_SUBSYSTEM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_usecase_subsystem_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.885] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5461
	os_tid = 0x6188

	[0071.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UML_USECASE_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uml_usecase_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5462
	os_tid = 0x618c

	[0071.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\useqme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.888] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5463
	os_tid = 0x6190

	[0071.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\useqme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.889] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5464
	os_tid = 0x6194

	[0071.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\useqme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5465
	os_tid = 0x6198

	[0071.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USEQME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\useqme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5466
	os_tid = 0x619c

	[0071.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustame_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.895] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5467
	os_tid = 0x61a0

	[0071.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustame_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5468
	os_tid = 0x61a4

	[0071.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustame_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.900] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5469
	os_tid = 0x61a8

	[0071.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTAME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustame_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.902] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5470
	os_tid = 0x61ac

	[0071.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustrme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.903] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5471
	os_tid = 0x61b0

	[0071.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustrme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.905] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5472
	os_tid = 0x61b4

	[0071.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustrme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.909] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5473
	os_tid = 0x61b8

	[0071.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\USTRME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\ustrme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.912] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5474
	os_tid = 0x61bc

	[0071.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uuseme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.915] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5475
	os_tid = 0x61c0

	[0071.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uuseme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5476
	os_tid = 0x61c4

	[0071.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uuseme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.918] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5477
	os_tid = 0x61c8

	[0071.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\UUSEME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\uuseme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.920] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5478
	os_tid = 0x61cc

	[0071.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE1_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE1_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\valve1_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.922] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5479
	os_tid = 0x61d0

	[0071.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE1_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE1_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\valve1_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.925] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5480
	os_tid = 0x61d4

	[0071.926] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE2_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE2_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\valve2_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.927] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5481
	os_tid = 0x61d8

	[0071.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE2_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VALVE2_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\valve2_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.928] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5482
	os_tid = 0x61dc

	[0071.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vehicl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.930] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5483
	os_tid = 0x61e0

	[0071.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vehicl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.932] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5484
	os_tid = 0x61e4

	[0071.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_VISIO2013_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_VISIO2013_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vehicl_visio2013_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.933] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5485
	os_tid = 0x61e8

	[0071.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_VISIO2013_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VEHICL_VISIO2013_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vehicl_visio2013_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.934] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5486
	os_tid = 0x61ec

	[0071.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VERTICALFLOWCHART_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VERTICALFLOWCHART_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\verticalflowchart_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.937] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5487
	os_tid = 0x61f0

	[0071.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VERTICALFLOWCHART_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VERTICALFLOWCHART_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\verticalflowchart_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.938] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5488
	os_tid = 0x61f4

	[0071.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VIDSUR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VIDSUR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vidsur_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.940] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5489
	os_tid = 0x61f8

	[0071.942] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VIDSUR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VIDSUR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vidsur_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.942] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5490
	os_tid = 0x61fc

	[0071.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vsm_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5491
	os_tid = 0x6200

	[0071.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vsm_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5492
	os_tid = 0x6204

	[0071.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vsm_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.949] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5493
	os_tid = 0x6208

	[0071.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\VSM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\vsm_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5494
	os_tid = 0x620c

	[0071.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WADOWI_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WADOWI_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wadowi_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5495
	os_tid = 0x6210

	[0071.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WADOWI_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WADOWI_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wadowi_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.960] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5496
	os_tid = 0x6214

	[0071.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WALL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WALL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wall_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.962] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5497
	os_tid = 0x6218

	[0071.964] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WALL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WALL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wall_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.964] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5498
	os_tid = 0x621c

	[0071.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\webmap_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.965] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5499
	os_tid = 0x6220

	[0071.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\webmap_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5500
	os_tid = 0x6224

	[0071.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\webmap_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5501
	os_tid = 0x6228

	[0071.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBMAP_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\webmap_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.974] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5502
	os_tid = 0x622c

	[0071.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\websit_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5503
	os_tid = 0x6230

	[0071.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_M.VSTX", dwFileAttributes=0x80) returned 0
	[0071.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\websit_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5504
	os_tid = 0x6234

	[0071.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\websit_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5505
	os_tid = 0x6238

	[0071.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_U.VSTX", dwFileAttributes=0x80) returned 0
	[0071.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WEBSIT_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\websit_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.981] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5506
	os_tid = 0x623c

	[0071.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WELD_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WELD_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\weld_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.983] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5507
	os_tid = 0x6240

	[0071.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WELD_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WELD_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\weld_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5508
	os_tid = 0x6244

	[0071.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCICN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCICN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfcicn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.987] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5509
	os_tid = 0x6248

	[0071.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCICN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCICN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfcicn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.988] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5510
	os_tid = 0x624c

	[0071.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCRS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCRS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfcrs_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.991] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5511
	os_tid = 0x6250

	[0071.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCRS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCRS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfcrs_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5512
	os_tid = 0x6254

	[0071.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCTRL_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCTRL_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfctrl_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.994] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5513
	os_tid = 0x6258

	[0071.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCTRL_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFCTRL_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfctrl_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.995] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5514
	os_tid = 0x625c

	[0071.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0071.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdeme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.997] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5515
	os_tid = 0x6260

	[0071.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0071.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdeme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5516
	os_tid = 0x6264

	[0072.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdep_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.000] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5517
	os_tid = 0x6268

	[0072.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDEP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdep_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.001] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5518
	os_tid = 0x626c

	[0072.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDGM_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDGM_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdgm_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.005] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5519
	os_tid = 0x6270

	[0072.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDGM_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDGM_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdgm_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.007] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5520
	os_tid = 0x6274

	[0072.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDLGS_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDLGS_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdlgs_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.012] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5521
	os_tid = 0x6278

	[0072.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDLGS_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFDLGS_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfdlgs_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.014] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5522
	os_tid = 0x627c

	[0072.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBJ_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBJ_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfobj_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.017] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5523
	os_tid = 0x6280

	[0072.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBJ_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBJ_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfobj_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.018] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5524
	os_tid = 0x6284

	[0072.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfobme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5525
	os_tid = 0x6288

	[0072.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFOBME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfobme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5526
	os_tid = 0x628c

	[0072.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTEP_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTEP_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfstep_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.025] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5527
	os_tid = 0x6290

	[0072.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTEP_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTEP_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfstep_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.027] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5528
	os_tid = 0x6294

	[0072.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTME_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTME_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfstme_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.029] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5529
	os_tid = 0x6298

	[0072.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTME_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFSTME_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfstme_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5530
	os_tid = 0x629c

	[0072.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFTLBR_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFTLBR_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wftlbr_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.034] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5531
	os_tid = 0x62a0

	[0072.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFTLBR_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFTLBR_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wftlbr_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5532
	os_tid = 0x62a4

	[0072.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFWICN_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFWICN_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfwicn_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5533
	os_tid = 0x62a8

	[0072.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFWICN_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WFWICN_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wfwicn_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.040] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5534
	os_tid = 0x62ac

	[0072.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_DEPARTMENTAL_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_DEPARTMENTAL_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\workflow_departmental_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.045] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5535
	os_tid = 0x62b0

	[0072.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_DEPARTMENTAL_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_DEPARTMENTAL_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\workflow_departmental_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.048] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5536
	os_tid = 0x62b4

	[0072.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_FUNCTION_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_FUNCTION_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\workflow_function_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.051] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5537
	os_tid = 0x62b8

	[0072.130] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_FUNCTION_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_FUNCTION_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\workflow_function_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.137] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5538
	os_tid = 0x62c0

	[0072.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_PROCESS_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_PROCESS_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\workflow_process_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.145] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5539
	os_tid = 0x62c4

	[0072.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_PROCESS_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WORKFLOW_PROCESS_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\workflow_process_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5540
	os_tid = 0x62c8

	[0072.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wrkflo_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.160] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5541
	os_tid = 0x62cc

	[0072.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wrkflo_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5542
	os_tid = 0x62d0

	[0072.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wrkflo_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5543
	os_tid = 0x62d4

	[0072.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFLO_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wrkflo_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5544
	os_tid = 0x62d8

	[0072.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFME_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFME_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wrkfme_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.190] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5545
	os_tid = 0x62dc

	[0072.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFME_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\WRKFME_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\wrkfme_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.197] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5546
	os_tid = 0x62e0

	[0072.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_M.VSSX", dwFileAttributes=0x80) returned 0
	[0072.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_M.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\xfunc_m.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.204] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5547
	os_tid = 0x62e4

	[0072.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_M.VSTX", dwFileAttributes=0x80) returned 0
	[0072.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_M.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\xfunc_m.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5548
	os_tid = 0x62e8

	[0072.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_U.VSSX", dwFileAttributes=0x80) returned 0
	[0072.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_U.VSSX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\xfunc_u.vssx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.220] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5549
	os_tid = 0x62ec

	[0072.221] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_U.VSTX", dwFileAttributes=0x80) returned 0
	[0072.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Visio Content\\1033\\XFUNC_U.VSTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio content\\1033\\xfunc_u.vstx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.226] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5550
	os_tid = 0x62f0

	[0072.228] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0072.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.229] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5551
	os_tid = 0x62f4

	[0072.230] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VisioCustom.propdesc", dwFileAttributes=0x80) returned 0
	[0072.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VisioCustom.propdesc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visiocustom.propdesc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.230] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5552
	os_tid = 0x62f8

	[0072.231] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0072.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.232] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5553
	os_tid = 0x62fc

	[0072.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", dwFileAttributes=0x80) returned 0
	[0072.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.234] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5554
	os_tid = 0x6300

	[0072.235] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", dwFileAttributes=0x80) returned 0
	[0072.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.235] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5555
	os_tid = 0x6304

	[0072.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", dwFileAttributes=0x80) returned 0
	[0072.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.236] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5556
	os_tid = 0x6308

	[0072.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", dwFileAttributes=0x80) returned 0
	[0072.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.238] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5557
	os_tid = 0x630c

	[0072.239] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.240] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5558
	os_tid = 0x6310

	[0072.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.241] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5559
	os_tid = 0x6314

	[0072.243] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.244] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5560
	os_tid = 0x6318

	[0072.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.245] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5561
	os_tid = 0x631c

	[0072.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.247] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5562
	os_tid = 0x6320

	[0072.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.249] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5563
	os_tid = 0x6324

	[0072.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5564
	os_tid = 0x6328

	[0072.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.252] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5565
	os_tid = 0x632c

	[0072.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.253] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5566
	os_tid = 0x6330

	[0072.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.255] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5567
	os_tid = 0x6334

	[0072.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.258] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5568
	os_tid = 0x6338

	[0072.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.259] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5569
	os_tid = 0x633c

	[0072.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.261] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5570
	os_tid = 0x6340

	[0072.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.262] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5571
	os_tid = 0x6344

	[0072.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.373] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5572
	os_tid = 0x6348

	[0072.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.375] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5573
	os_tid = 0x634c

	[0072.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.377] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5574
	os_tid = 0x6350

	[0072.378] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5575
	os_tid = 0x6354

	[0072.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.381] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5576
	os_tid = 0x6358

	[0072.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.383] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5577
	os_tid = 0x635c

	[0072.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.385] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5578
	os_tid = 0x6360

	[0072.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.387] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5579
	os_tid = 0x6364

	[0072.388] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.389] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5580
	os_tid = 0x6368

	[0072.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.392] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5581
	os_tid = 0x636c

	[0072.393] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5582
	os_tid = 0x6370

	[0072.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5583
	os_tid = 0x6374

	[0072.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.398] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5584
	os_tid = 0x6378

	[0072.399] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.401] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5585
	os_tid = 0x637c

	[0072.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.402] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5586
	os_tid = 0x6380

	[0072.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5587
	os_tid = 0x6384

	[0072.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5588
	os_tid = 0x6388

	[0072.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5589
	os_tid = 0x638c

	[0072.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5590
	os_tid = 0x6390

	[0072.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.411] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5591
	os_tid = 0x6394

	[0072.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5592
	os_tid = 0x6398

	[0072.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.415] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5593
	os_tid = 0x639c

	[0072.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5594
	os_tid = 0x63a0

	[0072.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5595
	os_tid = 0x63a4

	[0072.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5596
	os_tid = 0x63a8

	[0072.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5597
	os_tid = 0x63ac

	[0072.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5598
	os_tid = 0x63b0

	[0072.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5599
	os_tid = 0x63b4

	[0072.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5600
	os_tid = 0x63b8

	[0072.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5601
	os_tid = 0x63bc

	[0072.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5602
	os_tid = 0x63c0

	[0072.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5603
	os_tid = 0x63c4

	[0072.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5604
	os_tid = 0x63c8

	[0072.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.610] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5605
	os_tid = 0x63cc

	[0072.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.619] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5606
	os_tid = 0x63d0

	[0072.620] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.626] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5607
	os_tid = 0x63d4

	[0072.626] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.631] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5608
	os_tid = 0x63d8

	[0072.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.636] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5609
	os_tid = 0x63dc

	[0072.638] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.642] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5610
	os_tid = 0x63e0

	[0072.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.646] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5611
	os_tid = 0x63e4

	[0072.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.651] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5612
	os_tid = 0x63e8

	[0072.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.655] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5613
	os_tid = 0x63ec

	[0072.656] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.660] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5614
	os_tid = 0x63f0

	[0072.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.664] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5615
	os_tid = 0x63f4

	[0072.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5616
	os_tid = 0x63f8

	[0072.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.672] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5617
	os_tid = 0x63fc

	[0072.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.676] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5618
	os_tid = 0xf7c

	[0072.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.682] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5619
	os_tid = 0xf9c

	[0072.683] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.687] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5620
	os_tid = 0xd8c

	[0072.688] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5621
	os_tid = 0x6404

	[0072.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.698] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5622
	os_tid = 0x6408

	[0072.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.703] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5623
	os_tid = 0x640c

	[0072.703] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.707] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5624
	os_tid = 0x6410

	[0072.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.711] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5625
	os_tid = 0x6414

	[0072.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.715] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5626
	os_tid = 0x6418

	[0072.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.719] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5627
	os_tid = 0x641c

	[0072.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.723] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5628
	os_tid = 0x6420

	[0072.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.727] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5629
	os_tid = 0x6424

	[0072.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5630
	os_tid = 0x6428

	[0072.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5631
	os_tid = 0x642c

	[0072.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5632
	os_tid = 0x6430

	[0072.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5633
	os_tid = 0x6434

	[0072.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5634
	os_tid = 0x6438

	[0072.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", dwFileAttributes=0x80) returned 0
	[0072.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5635
	os_tid = 0x643c

	[0072.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x80) returned 0
	[0072.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.756] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5636
	os_tid = 0x6440

	[0072.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", dwFileAttributes=0x80) returned 0
	[0072.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.760] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5637
	os_tid = 0x6444

	[0072.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", dwFileAttributes=0x80) returned 0
	[0072.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.765] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5638
	os_tid = 0x6448

	[0072.766] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", dwFileAttributes=0x80) returned 0
	[0072.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.770] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5639
	os_tid = 0x644c

	[0072.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", dwFileAttributes=0x80) returned 0
	[0072.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.774] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5640
	os_tid = 0x6450

	[0072.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", dwFileAttributes=0x80) returned 0
	[0072.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.778] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5641
	os_tid = 0x6454

	[0072.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", dwFileAttributes=0x80) returned 0
	[0072.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.782] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5642
	os_tid = 0x6458

	[0072.782] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", dwFileAttributes=0x80) returned 0
	[0072.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.785] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5643
	os_tid = 0x645c

	[0072.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", dwFileAttributes=0x80) returned 0
	[0072.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5644
	os_tid = 0x6460

	[0072.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", dwFileAttributes=0x80) returned 0
	[0072.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5645
	os_tid = 0x6464

	[0072.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", dwFileAttributes=0x80) returned 0
	[0072.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5646
	os_tid = 0x6468

	[0072.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", dwFileAttributes=0x80) returned 0
	[0072.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.804] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5647
	os_tid = 0x646c

	[0072.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", dwFileAttributes=0x80) returned 0
	[0072.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5648
	os_tid = 0x6470

	[0072.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", dwFileAttributes=0x80) returned 0
	[0072.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5649
	os_tid = 0x6474

	[0072.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", dwFileAttributes=0x80) returned 0
	[0072.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5650
	os_tid = 0x6478

	[0072.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", dwFileAttributes=0x80) returned 0
	[0072.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.826] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5651
	os_tid = 0x647c

	[0072.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", dwFileAttributes=0x80) returned 0
	[0072.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5652
	os_tid = 0x6480

	[0072.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", dwFileAttributes=0x80) returned 0
	[0072.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.836] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5653
	os_tid = 0x6484

	[0072.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", dwFileAttributes=0x80) returned 0
	[0072.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.840] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5654
	os_tid = 0x6488

	[0072.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", dwFileAttributes=0x80) returned 0
	[0072.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.846] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5655
	os_tid = 0x648c

	[0072.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", dwFileAttributes=0x80) returned 0
	[0072.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.847] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5656
	os_tid = 0x6490

	[0072.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Address.accft", dwFileAttributes=0x80) returned 0
	[0072.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Address.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\address.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.852] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5657
	os_tid = 0x6494

	[0072.853] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Category.accft", dwFileAttributes=0x80) returned 0
	[0072.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Category.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\category.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.858] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5658
	os_tid = 0x6498

	[0072.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Name.accft", dwFileAttributes=0x80) returned 0
	[0072.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Name.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\name.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.863] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5659
	os_tid = 0x649c

	[0072.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Payment Type.accft", dwFileAttributes=0x80) returned 0
	[0072.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Payment Type.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\payment type.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.868] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5660
	os_tid = 0x64a0

	[0072.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Phone.accft", dwFileAttributes=0x80) returned 0
	[0072.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Phone.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\phone.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.873] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5661
	os_tid = 0x64a4

	[0072.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Priority.accft", dwFileAttributes=0x80) returned 0
	[0072.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Priority.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\priority.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.880] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5662
	os_tid = 0x64a8

	[0072.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Start End Dates.accft", dwFileAttributes=0x80) returned 0
	[0072.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Start End Dates.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\start end dates.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.885] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5663
	os_tid = 0x64ac

	[0072.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Status.accft", dwFileAttributes=0x80) returned 0
	[0072.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Status.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\status.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5664
	os_tid = 0x64b0

	[0072.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Tags.accft", dwFileAttributes=0x80) returned 0
	[0072.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\Tags.accft" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\tags.accft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5665
	os_tid = 0x64b4

	[0072.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", dwFileAttributes=0x80) returned 0
	[0072.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.897] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5666
	os_tid = 0x64b8

	[0072.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", dwFileAttributes=0x80) returned 0
	[0072.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.898] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5667
	os_tid = 0x64bc

	[0072.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", dwFileAttributes=0x80) returned 0
	[0072.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.899] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5668
	os_tid = 0x64c0

	[0072.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", dwFileAttributes=0x80) returned 0
	[0072.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.900] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5669
	os_tid = 0x64c4

	[0072.900] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", dwFileAttributes=0x80) returned 0
	[0072.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.901] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5670
	os_tid = 0x64c8

	[0072.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", dwFileAttributes=0x80) returned 0
	[0072.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.901] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5671
	os_tid = 0x64cc

	[0072.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", dwFileAttributes=0x80) returned 0
	[0072.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.903] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5672
	os_tid = 0x64d0

	[0072.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", dwFileAttributes=0x80) returned 0
	[0072.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5673
	os_tid = 0x64d4

	[0072.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", dwFileAttributes=0x80) returned 0
	[0072.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.904] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5674
	os_tid = 0x64d8

	[0072.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", dwFileAttributes=0x80) returned 0
	[0072.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.953] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5675
	os_tid = 0x64dc

	[0072.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", dwFileAttributes=0x80) returned 0
	[0072.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5676
	os_tid = 0x64e0

	[0072.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", dwFileAttributes=0x80) returned 0
	[0072.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.962] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5677
	os_tid = 0x64e4

	[0072.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tabs.accdt", dwFileAttributes=0x80) returned 0
	[0072.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tabs.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\tabs.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5678
	os_tid = 0x64e8

	[0072.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tasks.accdt", dwFileAttributes=0x80) returned 0
	[0072.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Tasks.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\tasks.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5679
	os_tid = 0x64ec

	[0072.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Users.accdt", dwFileAttributes=0x80) returned 0
	[0072.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Users.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\users.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5680
	os_tid = 0x64f0

	[0072.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", dwFileAttributes=0x80) returned 0
	[0072.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.974] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5681
	os_tid = 0x64f4

	[0072.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", dwFileAttributes=0x80) returned 0
	[0072.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5682
	os_tid = 0x64f8

	[0072.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", dwFileAttributes=0x80) returned 0
	[0072.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5683
	os_tid = 0x64fc

	[0072.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", dwFileAttributes=0x80) returned 0
	[0072.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.977] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5684
	os_tid = 0x6500

	[0072.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", dwFileAttributes=0x80) returned 0
	[0072.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.978] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5685
	os_tid = 0x6504

	[0072.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", dwFileAttributes=0x80) returned 0
	[0072.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.978] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5686
	os_tid = 0x6508

	[0072.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", dwFileAttributes=0x80) returned 0
	[0072.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5687
	os_tid = 0x650c

	[0072.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", dwFileAttributes=0x80) returned 0
	[0072.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.981] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5688
	os_tid = 0x6510

	[0072.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", dwFileAttributes=0x80) returned 0
	[0072.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.982] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5689
	os_tid = 0x6514

	[0072.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", dwFileAttributes=0x80) returned 0
	[0072.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.983] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5690
	os_tid = 0x6518

	[0072.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", dwFileAttributes=0x80) returned 0
	[0072.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.984] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5691
	os_tid = 0x651c

	[0072.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", dwFileAttributes=0x80) returned 0
	[0072.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.984] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5692
	os_tid = 0x6520

	[0072.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", dwFileAttributes=0x80) returned 0
	[0072.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5693
	os_tid = 0x6524

	[0072.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", dwFileAttributes=0x80) returned 0
	[0072.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.987] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5694
	os_tid = 0x6528

	[0072.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", dwFileAttributes=0x80) returned 0
	[0072.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.988] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5695
	os_tid = 0x652c

	[0072.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", dwFileAttributes=0x80) returned 0
	[0072.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.990] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5696
	os_tid = 0x6530

	[0072.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", dwFileAttributes=0x80) returned 0
	[0072.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.990] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5697
	os_tid = 0x6534

	[0072.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", dwFileAttributes=0x80) returned 0
	[0072.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.992] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5698
	os_tid = 0x6538

	[0072.993] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", dwFileAttributes=0x80) returned 0
	[0072.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5699
	os_tid = 0x653c

	[0072.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", dwFileAttributes=0x80) returned 0
	[0072.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.994] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5700
	os_tid = 0x6540

	[0072.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", dwFileAttributes=0x80) returned 0
	[0072.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.995] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5701
	os_tid = 0x6544

	[0072.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", dwFileAttributes=0x80) returned 0
	[0072.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.996] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5702
	os_tid = 0x6548

	[0072.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", dwFileAttributes=0x80) returned 0
	[0072.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.997] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5703
	os_tid = 0x654c

	[0072.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", dwFileAttributes=0x80) returned 0
	[0072.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.998] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5704
	os_tid = 0x6550

	[0072.999] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", dwFileAttributes=0x80) returned 0
	[0072.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5705
	os_tid = 0x6554

	[0073.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", dwFileAttributes=0x80) returned 0
	[0073.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.000] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5706
	os_tid = 0x6558

	[0073.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", dwFileAttributes=0x80) returned 0
	[0073.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.001] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5707
	os_tid = 0x655c

	[0073.147] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", dwFileAttributes=0x80) returned 0
	[0073.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.148] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5708
	os_tid = 0x6560

	[0073.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", dwFileAttributes=0x80) returned 0
	[0073.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5709
	os_tid = 0x6564

	[0073.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", dwFileAttributes=0x80) returned 0
	[0073.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.150] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5710
	os_tid = 0x6568

	[0073.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\Notebook03.onepkg", dwFileAttributes=0x80) returned 0
	[0073.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\Notebook03.onepkg" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\notebook templates\\notebook03.onepkg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5711
	os_tid = 0x656c

	[0073.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", dwFileAttributes=0x80) returned 0
	[0073.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5712
	os_tid = 0x6570

	[0073.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", dwFileAttributes=0x80) returned 0
	[0073.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5713
	os_tid = 0x6574

	[0073.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", dwFileAttributes=0x80) returned 0
	[0073.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.153] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5714
	os_tid = 0x6578

	[0073.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", dwFileAttributes=0x80) returned 0
	[0073.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5715
	os_tid = 0x657c

	[0073.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", dwFileAttributes=0x80) returned 0
	[0073.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5716
	os_tid = 0x6580

	[0073.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", dwFileAttributes=0x80) returned 0
	[0073.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5717
	os_tid = 0x6584

	[0073.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", dwFileAttributes=0x80) returned 0
	[0073.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5718
	os_tid = 0x6588

	[0073.158] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", dwFileAttributes=0x80) returned 0
	[0073.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.158] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5719
	os_tid = 0x658c

	[0073.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", dwFileAttributes=0x80) returned 0
	[0073.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.159] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5720
	os_tid = 0x6590

	[0073.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", dwFileAttributes=0x80) returned 0
	[0073.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.160] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5721
	os_tid = 0x6594

	[0073.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", dwFileAttributes=0x80) returned 0
	[0073.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5722
	os_tid = 0x6598

	[0073.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", dwFileAttributes=0x80) returned 0
	[0073.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5723
	os_tid = 0x659c

	[0073.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", dwFileAttributes=0x80) returned 0
	[0073.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.163] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5724
	os_tid = 0x65a0

	[0073.164] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", dwFileAttributes=0x80) returned 0
	[0073.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.164] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5725
	os_tid = 0x65a4

	[0073.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", dwFileAttributes=0x80) returned 0
	[0073.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.166] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5726
	os_tid = 0x65a8

	[0073.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", dwFileAttributes=0x80) returned 0
	[0073.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5727
	os_tid = 0x65ac

	[0073.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", dwFileAttributes=0x80) returned 0
	[0073.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5728
	os_tid = 0x65b0

	[0073.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", dwFileAttributes=0x80) returned 0
	[0073.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5729
	os_tid = 0x65b4

	[0073.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", dwFileAttributes=0x80) returned 0
	[0073.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5730
	os_tid = 0x65b8

	[0073.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", dwFileAttributes=0x80) returned 0
	[0073.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5731
	os_tid = 0x65bc

	[0073.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", dwFileAttributes=0x80) returned 0
	[0073.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5732
	os_tid = 0x65c0

	[0073.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", dwFileAttributes=0x80) returned 0
	[0073.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5733
	os_tid = 0x65c4

	[0073.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", dwFileAttributes=0x80) returned 0
	[0073.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5734
	os_tid = 0x65c8

	[0073.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", dwFileAttributes=0x80) returned 0
	[0073.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5735
	os_tid = 0x65cc

	[0073.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\AssetLibrary.ico", dwFileAttributes=0x80) returned 0
	[0073.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5736
	os_tid = 0x65d0

	[0073.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\DocumentRepository.ico", dwFileAttributes=0x80) returned 0
	[0073.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.252] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5737
	os_tid = 0x65d4

	[0073.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySharePoints.ico", dwFileAttributes=0x80) returned 0
	[0073.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.253] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5738
	os_tid = 0x65d8

	[0073.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySite.ico", dwFileAttributes=0x80) returned 0
	[0073.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.254] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5739
	os_tid = 0x65dc

	[0073.255] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointPortalSite.ico", dwFileAttributes=0x80) returned 0
	[0073.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.256] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5740
	os_tid = 0x65e0

	[0073.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointTeamSite.ico", dwFileAttributes=0x80) returned 0
	[0073.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.257] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5741
	os_tid = 0x65e4

	[0073.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.databasecompare.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.262] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5742
	os_tid = 0x65e8

	[0073.265] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.EXCEL.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.EXCEL.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.excel.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.269] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5743
	os_tid = 0x65ec

	[0073.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GRAPH.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GRAPH.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.graph.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.275] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5744
	os_tid = 0x65f0

	[0073.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GROOVE.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.GROOVE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.groove.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.281] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5745
	os_tid = 0x65f4

	[0073.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.287] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5746
	os_tid = 0x65f8

	[0073.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_BASIC.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_BASIC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync_basic.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.292] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5747
	os_tid = 0x65fc

	[0073.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_ONLINE.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.LYNC_ONLINE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.lync_online.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5748
	os_tid = 0x6600

	[0073.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSACCESS.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSACCESS.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.msaccess.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.304] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5749
	os_tid = 0x6604

	[0073.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSOUC.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSOUC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.msouc.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.308] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5750
	os_tid = 0x6608

	[0073.309] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSPUB.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.MSPUB.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.mspub.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.314] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5751
	os_tid = 0x660c

	[0073.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.ONENOTE.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.ONENOTE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.onenote.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.320] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5752
	os_tid = 0x6610

	[0073.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.OUTLOOK.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.OUTLOOK.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.outlook.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.332] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5753
	os_tid = 0x6614

	[0073.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.POWERPNT.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.POWERPNT.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.powerpnt.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.337] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5754
	os_tid = 0x6618

	[0073.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SETLANG.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SETLANG.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.setlang.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.342] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5755
	os_tid = 0x661c

	[0073.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.348] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5756
	os_tid = 0x6620

	[0073.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_BASIC.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_BASIC.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_basic.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5757
	os_tid = 0x6624

	[0073.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINE.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_online.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5758
	os_tid = 0x6628

	[0073.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINEG.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SKYPEFB_ONLINEG.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.skypefb_onlineg.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.364] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5759
	os_tid = 0x662c

	[0073.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SPREADSHEETCOMPARE.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.SPREADSHEETCOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.spreadsheetcompare.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.370] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5760
	os_tid = 0x6630

	[0073.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.379] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5761
	os_tid = 0x6634

	[0073.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_PRM.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_PRM.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio_prm.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.384] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5762
	os_tid = 0x6638

	[0073.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_STD.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.VISIO_STD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.visio_std.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.390] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5763
	os_tid = 0x663c

	[0073.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winproj.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.395] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5764
	os_tid = 0x6640

	[0073.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ_STD.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINPROJ_STD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winproj_std.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.400] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5765
	os_tid = 0x6644

	[0073.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINWORD.16.1033.hxn", dwFileAttributes=0x80) returned 0
	[0073.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.WINWORD.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.winword.16.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5766
	os_tid = 0x6648

	[0073.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\nslist.hxl", dwFileAttributes=0x80) returned 0
	[0073.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.410] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5767
	os_tid = 0x664c

	[0073.411] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYB.TTF", dwFileAttributes=0x80) returned 0
	[0073.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\agencyb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.412] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5768
	os_tid = 0x6650

	[0073.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYR.TTF", dwFileAttributes=0x80) returned 0
	[0073.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\AGENCYR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\agencyr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.413] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5769
	os_tid = 0x6654

	[0073.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ALGER.TTF", dwFileAttributes=0x80) returned 0
	[0073.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ALGER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\alger.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5770
	os_tid = 0x6658

	[0073.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAB.TTF", dwFileAttributes=0x80) returned 0
	[0073.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquab.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.416] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5771
	os_tid = 0x665c

	[0073.416] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUABI.TTF", dwFileAttributes=0x80) returned 0
	[0073.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUABI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquabi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.417] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5772
	os_tid = 0x6660

	[0073.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAI.TTF", dwFileAttributes=0x80) returned 0
	[0073.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ANTQUAI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\antquai.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.418] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5773
	os_tid = 0x6664

	[0073.419] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALN.TTF", dwFileAttributes=0x80) returned 0
	[0073.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.419] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5774
	os_tid = 0x6668

	[0073.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNB.TTF", dwFileAttributes=0x80) returned 0
	[0073.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialnb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5775
	os_tid = 0x666c

	[0073.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNBI.TTF", dwFileAttributes=0x80) returned 0
	[0073.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialnbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.421] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5776
	os_tid = 0x6670

	[0073.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNI.TTF", dwFileAttributes=0x80) returned 0
	[0073.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARIALNI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arialni.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.422] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5777
	os_tid = 0x6674

	[0073.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARLRDBD.TTF", dwFileAttributes=0x80) returned 0
	[0073.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ARLRDBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\arlrdbd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.423] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5778
	os_tid = 0x6678

	[0073.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BASKVILL.TTF", dwFileAttributes=0x80) returned 0
	[0073.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BASKVILL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\baskvill.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.424] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5779
	os_tid = 0x667c

	[0073.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BAUHS93.TTF", dwFileAttributes=0x80) returned 0
	[0073.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BAUHS93.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bauhs93.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5780
	os_tid = 0x6680

	[0073.425] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELL.TTF", dwFileAttributes=0x80) returned 0
	[0073.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bell.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.426] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5781
	os_tid = 0x6684

	[0073.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLB.TTF", dwFileAttributes=0x80) returned 0
	[0073.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bellb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.427] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5782
	os_tid = 0x6688

	[0073.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLI.TTF", dwFileAttributes=0x80) returned 0
	[0073.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BELLI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\belli.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.428] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5783
	os_tid = 0x668c

	[0073.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BERNHC.TTF", dwFileAttributes=0x80) returned 0
	[0073.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BERNHC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bernhc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5784
	os_tid = 0x6690

	[0073.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BKANT.TTF", dwFileAttributes=0x80) returned 0
	[0073.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BKANT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bkant.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.430] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5785
	os_tid = 0x6694

	[0073.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_B.TTF", dwFileAttributes=0x80) returned 0
	[0073.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_B.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_b.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.431] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5786
	os_tid = 0x6698

	[0073.432] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BI.TTF", dwFileAttributes=0x80) returned 0
	[0073.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_bi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5787
	os_tid = 0x669c

	[0073.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAI.TTF", dwFileAttributes=0x80) returned 0
	[0073.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_blai.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.433] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5788
	os_tid = 0x66a0

	[0073.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAR.TTF", dwFileAttributes=0x80) returned 0
	[0073.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_BLAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_blar.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5789
	os_tid = 0x66a4

	[0073.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CB.TTF", dwFileAttributes=0x80) returned 0
	[0073.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.435] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5790
	os_tid = 0x66a8

	[0073.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CBI.TTF", dwFileAttributes=0x80) returned 0
	[0073.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.437] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5791
	os_tid = 0x66ac

	[0073.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CI.TTF", dwFileAttributes=0x80) returned 0
	[0073.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_ci.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.437] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5792
	os_tid = 0x66b0

	[0073.438] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CR.TTF", dwFileAttributes=0x80) returned 0
	[0073.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_CR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_cr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.438] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5793
	os_tid = 0x66b4

	[0073.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_I.TTF", dwFileAttributes=0x80) returned 0
	[0073.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_I.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_i.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.439] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5794
	os_tid = 0x66b8

	[0073.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_PSTC.TTF", dwFileAttributes=0x80) returned 0
	[0073.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_PSTC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_pstc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.440] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5795
	os_tid = 0x66bc

	[0073.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_R.TTF", dwFileAttributes=0x80) returned 0
	[0073.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOD_R.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bod_r.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.441] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5796
	os_tid = 0x66c0

	[0073.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOS.TTF", dwFileAttributes=0x80) returned 0
	[0073.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookos.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.442] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5797
	os_tid = 0x66c4

	[0073.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSB.TTF", dwFileAttributes=0x80) returned 0
	[0073.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5798
	os_tid = 0x66c8

	[0073.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSBI.TTF", dwFileAttributes=0x80) returned 0
	[0073.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.661] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5799
	os_tid = 0x66cc

	[0073.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSI.TTF", dwFileAttributes=0x80) returned 0
	[0073.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BOOKOSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bookosi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.662] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5800
	os_tid = 0x66d0

	[0073.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRADHITC.TTF", dwFileAttributes=0x80) returned 0
	[0073.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRADHITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bradhitc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.666] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5801
	os_tid = 0x66d4

	[0073.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRITANIC.TTF", dwFileAttributes=0x80) returned 0
	[0073.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRITANIC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\britanic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.668] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5802
	os_tid = 0x66d8

	[0073.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSB.TTF", dwFileAttributes=0x80) returned 0
	[0073.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.690] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5803
	os_tid = 0x66dc

	[0073.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSDB.TTF", dwFileAttributes=0x80) returned 0
	[0073.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSDB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsdb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.692] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5804
	os_tid = 0x66e0

	[0073.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSR.TTF", dwFileAttributes=0x80) returned 0
	[0073.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRLNSR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brlnsr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.693] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5805
	os_tid = 0x66e4

	[0073.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BROADW.TTF", dwFileAttributes=0x80) returned 0
	[0073.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BROADW.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\broadw.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5806
	os_tid = 0x66e8

	[0073.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRUSHSCI.TTF", dwFileAttributes=0x80) returned 0
	[0073.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BRUSHSCI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\brushsci.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.694] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5807
	os_tid = 0x66ec

	[0073.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BSSYM7.TTF", dwFileAttributes=0x80) returned 0
	[0073.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\BSSYM7.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\bssym7.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.696] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5808
	os_tid = 0x66f0

	[0073.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriL.ttf", dwFileAttributes=0x80) returned 0
	[0073.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriL.ttf" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calibril.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.697] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5809
	os_tid = 0x66f4

	[0073.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriLI.ttf", dwFileAttributes=0x80) returned 0
	[0073.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CalibriLI.ttf" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calibrili.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.699] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5810
	os_tid = 0x66f8

	[0073.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFB.TTF", dwFileAttributes=0x80) returned 0
	[0073.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.701] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5811
	os_tid = 0x66fc

	[0073.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFI.TTF", dwFileAttributes=0x80) returned 0
	[0073.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.702] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5812
	os_tid = 0x6700

	[0073.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFR.TTF", dwFileAttributes=0x80) returned 0
	[0073.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIFR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\califr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.704] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5813
	os_tid = 0x6704

	[0073.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIST.TTF", dwFileAttributes=0x80) returned 0
	[0073.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALIST.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calist.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.707] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5814
	os_tid = 0x6708

	[0073.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTB.TTF", dwFileAttributes=0x80) returned 0
	[0073.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calistb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.708] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5815
	os_tid = 0x670c

	[0073.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTBI.TTF", dwFileAttributes=0x80) returned 0
	[0073.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calistbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.710] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5816
	os_tid = 0x6710

	[0073.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTI.TTF", dwFileAttributes=0x80) returned 0
	[0073.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CALISTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\calisti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.711] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5817
	os_tid = 0x6714

	[0073.712] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CASTELAR.TTF", dwFileAttributes=0x80) returned 0
	[0073.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CASTELAR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\castelar.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.713] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5818
	os_tid = 0x6718

	[0073.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENSCBK.TTF", dwFileAttributes=0x80) returned 0
	[0073.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENSCBK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\censcbk.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.714] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5819
	os_tid = 0x671c

	[0073.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTAUR.TTF", dwFileAttributes=0x80) returned 0
	[0073.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTAUR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\centaur.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.716] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5820
	os_tid = 0x6720

	[0073.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTURY.TTF", dwFileAttributes=0x80) returned 0
	[0073.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CENTURY.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\century.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.718] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5821
	os_tid = 0x6724

	[0073.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CHILLER.TTF", dwFileAttributes=0x80) returned 0
	[0073.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CHILLER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\chiller.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.720] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5822
	os_tid = 0x6728

	[0073.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COLONNA.TTF", dwFileAttributes=0x80) returned 0
	[0073.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COLONNA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\colonna.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.721] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5823
	os_tid = 0x672c

	[0073.722] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COOPBL.TTF", dwFileAttributes=0x80) returned 0
	[0073.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COOPBL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coopbl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.722] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5824
	os_tid = 0x6730

	[0073.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTB.TTF", dwFileAttributes=0x80) returned 0
	[0073.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coprgtb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.724] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5825
	os_tid = 0x6734

	[0073.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTL.TTF", dwFileAttributes=0x80) returned 0
	[0073.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\COPRGTL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\coprgtl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.726] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5826
	os_tid = 0x6738

	[0073.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CURLZ___.TTF", dwFileAttributes=0x80) returned 0
	[0073.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\CURLZ___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\curlz___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.728] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5827
	os_tid = 0x673c

	[0073.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNT.TTF", dwFileAttributes=0x80) returned 0
	[0073.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\elephnt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.729] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5828
	os_tid = 0x6740

	[0073.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNTI.TTF", dwFileAttributes=0x80) returned 0
	[0073.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ELEPHNTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\elephnti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5829
	os_tid = 0x6744

	[0073.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ENGR.TTF", dwFileAttributes=0x80) returned 0
	[0073.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ENGR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\engr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.733] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5830
	os_tid = 0x6748

	[0073.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASBD.TTF", dwFileAttributes=0x80) returned 0
	[0073.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasbd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5831
	os_tid = 0x674c

	[0073.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASDEMI.TTF", dwFileAttributes=0x80) returned 0
	[0073.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASDEMI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasdemi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5832
	os_tid = 0x6750

	[0073.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASLGHT.TTF", dwFileAttributes=0x80) returned 0
	[0073.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASLGHT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\eraslght.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5833
	os_tid = 0x6754

	[0073.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASMD.TTF", dwFileAttributes=0x80) returned 0
	[0073.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ERASMD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\erasmd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.739] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5834
	os_tid = 0x6758

	[0073.781] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FELIXTI.TTF", dwFileAttributes=0x80) returned 0
	[0073.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FELIXTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\felixti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.783] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5835
	os_tid = 0x675c

	[0073.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FORTE.TTF", dwFileAttributes=0x80) returned 0
	[0073.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FORTE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\forte.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.784] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5836
	os_tid = 0x6760

	[0073.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABK.TTF", dwFileAttributes=0x80) returned 0
	[0073.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frabk.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.786] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5837
	os_tid = 0x6764

	[0073.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABKIT.TTF", dwFileAttributes=0x80) returned 0
	[0073.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRABKIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frabkit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.788] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5838
	os_tid = 0x6768

	[0073.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADM.TTF", dwFileAttributes=0x80) returned 0
	[0073.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradm.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.790] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5839
	os_tid = 0x676c

	[0073.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMCN.TTF", dwFileAttributes=0x80) returned 0
	[0073.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMCN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradmcn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.791] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5840
	os_tid = 0x6770

	[0073.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMIT.TTF", dwFileAttributes=0x80) returned 0
	[0073.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRADMIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\fradmit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.792] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5841
	os_tid = 0x6774

	[0073.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHV.TTF", dwFileAttributes=0x80) returned 0
	[0073.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHV.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frahv.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.793] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5842
	os_tid = 0x6778

	[0073.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHVIT.TTF", dwFileAttributes=0x80) returned 0
	[0073.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAHVIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frahvit.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5843
	os_tid = 0x677c

	[0073.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAMDCN.TTF", dwFileAttributes=0x80) returned 0
	[0073.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRAMDCN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\framdcn.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5844
	os_tid = 0x6780

	[0073.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FREESCPT.TTF", dwFileAttributes=0x80) returned 0
	[0073.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FREESCPT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\freescpt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.801] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5845
	os_tid = 0x6784

	[0073.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRSCRIPT.TTF", dwFileAttributes=0x80) returned 0
	[0073.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FRSCRIPT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\frscript.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.803] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5846
	os_tid = 0x6788

	[0073.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FTLTLT.TTF", dwFileAttributes=0x80) returned 0
	[0073.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\FTLTLT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ftltlt.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.804] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5847
	os_tid = 0x678c

	[0073.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GABRIOLA.TTF", dwFileAttributes=0x80) returned 0
	[0073.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GABRIOLA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gabriola.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.806] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5848
	os_tid = 0x6790

	[0073.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGI.TTF", dwFileAttributes=0x80) returned 0
	[0073.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gadugi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.808] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5849
	os_tid = 0x6794

	[0073.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGIB.TTF", dwFileAttributes=0x80) returned 0
	[0073.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GADUGIB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gadugib.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5850
	os_tid = 0x6798

	[0073.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARA.TTF", dwFileAttributes=0x80) returned 0
	[0073.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gara.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5851
	os_tid = 0x679c

	[0073.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARABD.TTF", dwFileAttributes=0x80) returned 0
	[0073.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARABD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\garabd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5852
	os_tid = 0x67a0

	[0073.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARAIT.TTF", dwFileAttributes=0x80) returned 0
	[0073.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GARAIT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\garait.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.812] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5853
	os_tid = 0x67a4

	[0073.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIGI.TTF", dwFileAttributes=0x80) returned 0
	[0073.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIGI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gigi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.814] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5854
	os_tid = 0x67a8

	[0073.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILBI___.TTF", dwFileAttributes=0x80) returned 0
	[0073.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILBI___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilbi___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5855
	os_tid = 0x67ac

	[0073.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILB____.TTF", dwFileAttributes=0x80) returned 0
	[0073.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5856
	os_tid = 0x67b0

	[0073.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILC____.TTF", dwFileAttributes=0x80) returned 0
	[0073.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILC____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilc____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5857
	os_tid = 0x67b4

	[0073.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILI____.TTF", dwFileAttributes=0x80) returned 0
	[0073.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gili____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5858
	os_tid = 0x67b8

	[0073.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILLUBCD.TTF", dwFileAttributes=0x80) returned 0
	[0073.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILLUBCD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gillubcd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5859
	os_tid = 0x67bc

	[0073.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILSANUB.TTF", dwFileAttributes=0x80) returned 0
	[0073.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GILSANUB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gilsanub.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5860
	os_tid = 0x67c0

	[0073.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIL_____.TTF", dwFileAttributes=0x80) returned 0
	[0073.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GIL_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gil_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5861
	os_tid = 0x67c4

	[0073.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLECB.TTF", dwFileAttributes=0x80) returned 0
	[0073.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLECB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\glecb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5862
	os_tid = 0x67c8

	[0073.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLSNECB.TTF", dwFileAttributes=0x80) returned 0
	[0073.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GLSNECB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\glsnecb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5863
	os_tid = 0x67cc

	[0073.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHIC.TTF", dwFileAttributes=0x80) returned 0
	[0073.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHIC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.829] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5864
	os_tid = 0x67d0

	[0073.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICB.TTF", dwFileAttributes=0x80) returned 0
	[0073.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothicb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.831] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5865
	os_tid = 0x67d4

	[0073.832] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICBI.TTF", dwFileAttributes=0x80) returned 0
	[0073.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothicbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.832] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5866
	os_tid = 0x67d8

	[0073.833] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICI.TTF", dwFileAttributes=0x80) returned 0
	[0073.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOTHICI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\gothici.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.833] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5867
	os_tid = 0x67dc

	[0073.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOS.TTF", dwFileAttributes=0x80) returned 0
	[0073.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudos.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.875] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5868
	os_tid = 0x67e0

	[0073.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSB.TTF", dwFileAttributes=0x80) returned 0
	[0073.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudosb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.876] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5869
	os_tid = 0x67e4

	[0073.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSI.TTF", dwFileAttributes=0x80) returned 0
	[0073.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDOSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudosi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.878] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5870
	os_tid = 0x67e8

	[0073.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDYSTO.TTF", dwFileAttributes=0x80) returned 0
	[0073.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\GOUDYSTO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\goudysto.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.880] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5871
	os_tid = 0x67ec

	[0073.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARLOWSI.TTF", dwFileAttributes=0x80) returned 0
	[0073.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARLOWSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\harlowsi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5872
	os_tid = 0x67f0

	[0073.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARNGTON.TTF", dwFileAttributes=0x80) returned 0
	[0073.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HARNGTON.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\harngton.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.883] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5873
	os_tid = 0x67f4

	[0073.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HATTEN.TTF", dwFileAttributes=0x80) returned 0
	[0073.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HATTEN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\hatten.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.884] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5874
	os_tid = 0x67f8

	[0073.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERT.TTF", dwFileAttributes=0x80) returned 0
	[0073.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\htowert.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5875
	os_tid = 0x67fc

	[0073.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERTI.TTF", dwFileAttributes=0x80) returned 0
	[0073.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\HTOWERTI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\htowerti.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.888] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5876
	os_tid = 0xda4

	[0073.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\IMPRISHA.TTF", dwFileAttributes=0x80) returned 0
	[0073.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\IMPRISHA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\imprisha.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.889] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5877
	os_tid = 0xf98

	[0073.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\INFROMAN.TTF", dwFileAttributes=0x80) returned 0
	[0073.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\INFROMAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\infroman.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.890] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5878
	os_tid = 0x1090

	[0073.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCBLKAD.TTF", dwFileAttributes=0x80) returned 0
	[0073.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCBLKAD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itcblkad.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5879
	os_tid = 0xf14

	[0073.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCEDSCR.TTF", dwFileAttributes=0x80) returned 0
	[0073.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCEDSCR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itcedscr.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.893] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5880
	os_tid = 0xf90

	[0073.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCKRIST.TTF", dwFileAttributes=0x80) returned 0
	[0073.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ITCKRIST.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\itckrist.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.895] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5881
	os_tid = 0xdc0

	[0073.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JOKERMAN.TTF", dwFileAttributes=0x80) returned 0
	[0073.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JOKERMAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\jokerman.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5882
	os_tid = 0x6c8

	[0073.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JUICE___.TTF", dwFileAttributes=0x80) returned 0
	[0073.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\JUICE___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\juice___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.900] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5883
	os_tid = 0xe0c

	[0073.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\KUNSTLER.TTF", dwFileAttributes=0x80) returned 0
	[0073.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\KUNSTLER.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\kunstler.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.902] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5884
	os_tid = 0x6804

	[0073.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LATINWD.TTF", dwFileAttributes=0x80) returned 0
	[0073.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LATINWD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\latinwd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.903] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5885
	os_tid = 0x6808

	[0073.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITE.TTF", dwFileAttributes=0x80) returned 0
	[0073.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbrite.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.905] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5886
	os_tid = 0x680c

	[0073.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITED.TTF", dwFileAttributes=0x80) returned 0
	[0073.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITED.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbrited.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.906] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5887
	os_tid = 0x6810

	[0073.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEDI.TTF", dwFileAttributes=0x80) returned 0
	[0073.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbritedi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.907] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5888
	os_tid = 0x6814

	[0073.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEI.TTF", dwFileAttributes=0x80) returned 0
	[0073.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LBRITEI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lbritei.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.908] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5889
	os_tid = 0x6818

	[0073.909] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LCALLIG.TTF", dwFileAttributes=0x80) returned 0
	[0073.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LCALLIG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lcallig.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.910] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5890
	os_tid = 0x681c

	[0073.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWAD.TTF", dwFileAttributes=0x80) returned 0
	[0073.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWAD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\leelawad.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.911] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5891
	os_tid = 0x6820

	[0073.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWDB.TTF", dwFileAttributes=0x80) returned 0
	[0073.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LEELAWDB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\leelawdb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.912] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5892
	os_tid = 0x6824

	[0073.913] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAX.TTF", dwFileAttributes=0x80) returned 0
	[0073.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAX.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfax.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.914] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5893
	os_tid = 0x6828

	[0073.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXD.TTF", dwFileAttributes=0x80) returned 0
	[0073.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.915] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5894
	os_tid = 0x682c

	[0073.916] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXDI.TTF", dwFileAttributes=0x80) returned 0
	[0073.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxdi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.916] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5895
	os_tid = 0x6830

	[0073.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXI.TTF", dwFileAttributes=0x80) returned 0
	[0073.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LFAXI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lfaxi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.917] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5896
	os_tid = 0x6834

	[0073.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LHANDW.TTF", dwFileAttributes=0x80) returned 0
	[0073.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LHANDW.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lhandw.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.919] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5897
	os_tid = 0x6838

	[0073.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANS.TTF", dwFileAttributes=0x80) returned 0
	[0073.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsans.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.920] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5898
	os_tid = 0x683c

	[0073.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSD.TTF", dwFileAttributes=0x80) returned 0
	[0073.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5899
	os_tid = 0x6840

	[0073.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSDI.TTF", dwFileAttributes=0x80) returned 0
	[0073.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSDI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansdi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5900
	os_tid = 0x6844

	[0073.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSI.TTF", dwFileAttributes=0x80) returned 0
	[0073.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LSANSI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\lsansi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5901
	os_tid = 0x6848

	[0073.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPE.TTF", dwFileAttributes=0x80) returned 0
	[0073.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltype.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5902
	os_tid = 0x684c

	[0073.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEB.TTF", dwFileAttributes=0x80) returned 0
	[0073.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypeb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.977] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5903
	os_tid = 0x6850

	[0073.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEBO.TTF", dwFileAttributes=0x80) returned 0
	[0073.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEBO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypebo.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5904
	os_tid = 0x6854

	[0073.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEO.TTF", dwFileAttributes=0x80) returned 0
	[0073.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\LTYPEO.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ltypeo.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5905
	os_tid = 0x6858

	[0073.981] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAGNETOB.TTF", dwFileAttributes=0x80) returned 0
	[0073.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAGNETOB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\magnetob.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.982] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5906
	os_tid = 0x685c

	[0073.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAIAN.TTF", dwFileAttributes=0x80) returned 0
	[0073.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MAIAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\maian.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.984] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5907
	os_tid = 0x6860

	[0073.985] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MATURASC.TTF", dwFileAttributes=0x80) returned 0
	[0073.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MATURASC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\maturasc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.985] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5908
	os_tid = 0x6864

	[0073.986] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MISTRAL.TTF", dwFileAttributes=0x80) returned 0
	[0073.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MISTRAL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mistral.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.987] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5909
	os_tid = 0x6868

	[0073.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MOD20.TTF", dwFileAttributes=0x80) returned 0
	[0073.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MOD20.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mod20.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.988] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5910
	os_tid = 0x686c

	[0073.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJH.TTC", dwFileAttributes=0x80) returned 0
	[0073.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJH.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msjh.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.989] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5911
	os_tid = 0x6870

	[0073.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJHBD.TTC", dwFileAttributes=0x80) returned 0
	[0073.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSJHBD.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msjhbd.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.991] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5912
	os_tid = 0x6874

	[0073.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUB.TTF", dwFileAttributes=0x80) returned 0
	[0073.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msuighub.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.993] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5913
	os_tid = 0x6878

	[0073.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUR.TTF", dwFileAttributes=0x80) returned 0
	[0073.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSUIGHUR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msuighur.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.995] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5914
	os_tid = 0x687c

	[0073.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYH.TTC", dwFileAttributes=0x80) returned 0
	[0073.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYH.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msyh.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.996] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5915
	os_tid = 0x6880

	[0073.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYHBD.TTC", dwFileAttributes=0x80) returned 0
	[0073.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MSYHBD.TTC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\msyhbd.ttc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0073.999] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5916
	os_tid = 0x6884

	[0074.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTCORSVA.TTF", dwFileAttributes=0x80) returned 0
	[0074.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\MTCORSVA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\mtcorsva.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.003] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5917
	os_tid = 0x6888

	[0074.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGENG.TTF", dwFileAttributes=0x80) returned 0
	[0074.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGENG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\niageng.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.005] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5918
	os_tid = 0x688c

	[0074.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGSOL.TTF", dwFileAttributes=0x80) returned 0
	[0074.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIAGSOL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\niagsol.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.006] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5919
	os_tid = 0x6890

	[0074.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALA.TTF", dwFileAttributes=0x80) returned 0
	[0074.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\nirmala.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.012] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5920
	os_tid = 0x6894

	[0074.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALAB.TTF", dwFileAttributes=0x80) returned 0
	[0074.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\NIRMALAB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\nirmalab.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.014] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5921
	os_tid = 0x6898

	[0074.015] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OCRAEXT.TTF", dwFileAttributes=0x80) returned 0
	[0074.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OCRAEXT.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ocraext.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.015] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5922
	os_tid = 0x689c

	[0074.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OLDENGL.TTF", dwFileAttributes=0x80) returned 0
	[0074.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OLDENGL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\oldengl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.016] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5923
	os_tid = 0x68a0

	[0074.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ONYX.TTF", dwFileAttributes=0x80) returned 0
	[0074.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ONYX.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\onyx.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.018] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5924
	os_tid = 0x68a4

	[0074.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OUTLOOK.TTF", dwFileAttributes=0x80) returned 0
	[0074.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\OUTLOOK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\outlook.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.019] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5925
	os_tid = 0x68a8

	[0074.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PALSCRI.TTF", dwFileAttributes=0x80) returned 0
	[0074.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PALSCRI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\palscri.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.020] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5926
	os_tid = 0x68ac

	[0074.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PAPYRUS.TTF", dwFileAttributes=0x80) returned 0
	[0074.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PAPYRUS.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\papyrus.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5927
	os_tid = 0x68b0

	[0074.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PARCHM.TTF", dwFileAttributes=0x80) returned 0
	[0074.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PARCHM.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\parchm.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5928
	os_tid = 0x68b4

	[0074.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERBI___.TTF", dwFileAttributes=0x80) returned 0
	[0074.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERBI___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\perbi___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.024] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5929
	os_tid = 0x68b8

	[0074.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERB____.TTF", dwFileAttributes=0x80) returned 0
	[0074.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\perb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.026] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5930
	os_tid = 0x68bc

	[0074.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERI____.TTF", dwFileAttributes=0x80) returned 0
	[0074.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\peri____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.027] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5931
	os_tid = 0x68c0

	[0074.028] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTIBD.TTF", dwFileAttributes=0x80) returned 0
	[0074.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTIBD.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pertibd.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.028] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5932
	os_tid = 0x68c4

	[0074.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTILI.TTF", dwFileAttributes=0x80) returned 0
	[0074.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PERTILI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pertili.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.029] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5933
	os_tid = 0x68c8

	[0074.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PER_____.TTF", dwFileAttributes=0x80) returned 0
	[0074.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PER_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\per_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5934
	os_tid = 0x68cc

	[0074.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PLAYBILL.TTF", dwFileAttributes=0x80) returned 0
	[0074.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PLAYBILL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\playbill.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5935
	os_tid = 0x68d0

	[0074.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\POORICH.TTF", dwFileAttributes=0x80) returned 0
	[0074.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\POORICH.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\poorich.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5936
	os_tid = 0x68d4

	[0074.209] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PRISTINA.TTF", dwFileAttributes=0x80) returned 0
	[0074.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\PRISTINA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\pristina.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.213] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5937
	os_tid = 0x68d8

	[0074.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAGE.TTF", dwFileAttributes=0x80) returned 0
	[0074.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAGE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rage.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.269] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5938
	os_tid = 0x68dc

	[0074.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAVIE.TTF", dwFileAttributes=0x80) returned 0
	[0074.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\RAVIE.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\ravie.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.273] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5939
	os_tid = 0x68e0

	[0074.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSAN.TTF", dwFileAttributes=0x80) returned 0
	[0074.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSAN.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\refsan.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5940
	os_tid = 0x68e4

	[0074.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSPCL.TTF", dwFileAttributes=0x80) returned 0
	[0074.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\REFSPCL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\refspcl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.284] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5941
	os_tid = 0x68e8

	[0074.285] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCCB___.TTF", dwFileAttributes=0x80) returned 0
	[0074.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCCB___.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\roccb___.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.288] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5942
	os_tid = 0x68ec

	[0074.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCC____.TTF", dwFileAttributes=0x80) returned 0
	[0074.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCC____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rocc____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.293] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5943
	os_tid = 0x68f0

	[0074.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCK.TTF", dwFileAttributes=0x80) returned 0
	[0074.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCK.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rock.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.297] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5944
	os_tid = 0x68f4

	[0074.298] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKB.TTF", dwFileAttributes=0x80) returned 0
	[0074.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.301] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5945
	os_tid = 0x68f8

	[0074.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKBI.TTF", dwFileAttributes=0x80) returned 0
	[0074.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.306] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5946
	os_tid = 0x68fc

	[0074.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKEB.TTF", dwFileAttributes=0x80) returned 0
	[0074.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rockeb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.309] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5947
	os_tid = 0x6900

	[0074.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKI.TTF", dwFileAttributes=0x80) returned 0
	[0074.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\ROCKI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\rocki.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.313] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5948
	os_tid = 0x6904

	[0074.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKB.TTF", dwFileAttributes=0x80) returned 0
	[0074.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbkb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.317] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5949
	os_tid = 0x6908

	[0074.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKBI.TTF", dwFileAttributes=0x80) returned 0
	[0074.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKBI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbkbi.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.321] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5950
	os_tid = 0x690c

	[0074.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKI.TTF", dwFileAttributes=0x80) returned 0
	[0074.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCHLBKI.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\schlbki.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.330] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5951
	os_tid = 0x6910

	[0074.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCRIPTBL.TTF", dwFileAttributes=0x80) returned 0
	[0074.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SCRIPTBL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\scriptbl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.334] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5952
	os_tid = 0x6914

	[0074.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SEGOEUISL.TTF", dwFileAttributes=0x80) returned 0
	[0074.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SEGOEUISL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\segoeuisl.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.339] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5953
	os_tid = 0x6918

	[0074.340] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SHOWG.TTF", dwFileAttributes=0x80) returned 0
	[0074.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SHOWG.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\showg.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.343] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5954
	os_tid = 0x691c

	[0074.344] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SNAP____.TTF", dwFileAttributes=0x80) returned 0
	[0074.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\SNAP____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\snap____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.347] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5955
	os_tid = 0x6920

	[0074.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\STENCIL.TTF", dwFileAttributes=0x80) returned 0
	[0074.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\STENCIL.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\stencil.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.350] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5956
	os_tid = 0x6924

	[0074.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCBI____.TTF", dwFileAttributes=0x80) returned 0
	[0074.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCBI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcbi____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.354] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5957
	os_tid = 0x6928

	[0074.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCB_____.TTF", dwFileAttributes=0x80) returned 0
	[0074.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCB_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcb_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.359] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5958
	os_tid = 0x692c

	[0074.359] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCB____.TTF", dwFileAttributes=0x80) returned 0
	[0074.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCB____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tccb____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.362] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5959
	os_tid = 0x6930

	[0074.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCEB.TTF", dwFileAttributes=0x80) returned 0
	[0074.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCEB.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcceb.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.366] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5960
	os_tid = 0x6934

	[0074.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCM____.TTF", dwFileAttributes=0x80) returned 0
	[0074.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCCM____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tccm____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.371] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5961
	os_tid = 0x6938

	[0074.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCMI____.TTF", dwFileAttributes=0x80) returned 0
	[0074.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCMI____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcmi____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.374] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5962
	os_tid = 0x693c

	[0074.375] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCM_____.TTF", dwFileAttributes=0x80) returned 0
	[0074.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TCM_____.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tcm_____.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.378] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5963
	os_tid = 0x6940

	[0074.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TEMPSITC.TTF", dwFileAttributes=0x80) returned 0
	[0074.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\TEMPSITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\tempsitc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.382] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5964
	os_tid = 0x6944

	[0074.383] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VINERITC.TTF", dwFileAttributes=0x80) returned 0
	[0074.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VINERITC.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vineritc.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.386] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5965
	os_tid = 0x6948

	[0074.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VIVALDII.TTF", dwFileAttributes=0x80) returned 0
	[0074.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VIVALDII.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vivaldii.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.393] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5966
	os_tid = 0x694c

	[0074.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VLADIMIR.TTF", dwFileAttributes=0x80) returned 0
	[0074.395] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\VLADIMIR.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\vladimir.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.397] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5967
	os_tid = 0x6950

	[0074.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG2.TTF", dwFileAttributes=0x80) returned 0
	[0074.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG2.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\wingdng2.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.401] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5968
	os_tid = 0x6954

	[0074.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG3.TTF", dwFileAttributes=0x80) returned 0
	[0074.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Fonts\\private\\WINGDNG3.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\fonts\\private\\wingdng3.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.405] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5969
	os_tid = 0x6958

	[0074.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x80) returned 0
	[0074.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.406] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5970
	os_tid = 0x695c

	[0074.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT", dwFileAttributes=0x80) returned 0
	[0074.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.CNT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.cnt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.407] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5971
	os_tid = 0x6960

	[0074.408] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP", dwFileAttributes=0x80) returned 0
	[0074.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\EQNEDT32.HLP" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\eqnedt32.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.408] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5972
	os_tid = 0x6964

	[0074.409] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF", dwFileAttributes=0x80) returned 0
	[0074.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\EQUATION\\MTEXTRA.TTF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\equation\\mtextra.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.409] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5973
	os_tid = 0x6968

	[0074.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT", dwFileAttributes=0x80) returned 0
	[0074.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\EPSIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\epsimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.414] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5974
	os_tid = 0x696c

	[0074.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT", dwFileAttributes=0x80) returned 0
	[0074.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\GIFIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\gifimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.420] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5975
	os_tid = 0x6970

	[0074.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT", dwFileAttributes=0x80) returned 0
	[0074.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\JPEGIM32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\jpegim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.425] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5976
	os_tid = 0x6974

	[0074.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.EPS", dwFileAttributes=0x80) returned 0
	[0074.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.EPS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.eps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.429] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5977
	os_tid = 0x6978

	[0074.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.GIF", dwFileAttributes=0x80) returned 0
	[0074.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.434] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5978
	os_tid = 0x697c

	[0074.435] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.JPG", dwFileAttributes=0x80) returned 0
	[0074.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.JPG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.439] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5979
	os_tid = 0x6980

	[0074.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.PNG", dwFileAttributes=0x80) returned 0
	[0074.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.443] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5980
	os_tid = 0x6984

	[0074.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.WPG", dwFileAttributes=0x80) returned 0
	[0074.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\MS.WPG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\ms.wpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.448] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5981
	os_tid = 0x6988

	[0074.448] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT", dwFileAttributes=0x80) returned 0
	[0074.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PICTIM32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\pictim32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.452] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5982
	os_tid = 0x698c

	[0074.454] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PNG32.FLT", dwFileAttributes=0x80) returned 0
	[0074.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\PNG32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\png32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.457] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5983
	os_tid = 0x6990

	[0074.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT", dwFileAttributes=0x80) returned 0
	[0074.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\GRPHFLT\\WPGIMP32.FLT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\grphflt\\wpgimp32.flt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.461] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5984
	os_tid = 0x6994

	[0074.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxC", dwFileAttributes=0x80) returned 0
	[0074.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxC" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hx.hxc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.466] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5985
	os_tid = 0x6998

	[0074.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxT", dwFileAttributes=0x80) returned 0
	[0074.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Hx.HxT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hx.hxt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.470] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5986
	os_tid = 0x699c

	[0074.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\HxRuntime.HxS", dwFileAttributes=0x80) returned 0
	[0074.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\HxRuntime.HxS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\hxruntime.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.474] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5987
	os_tid = 0x69a0

	[0074.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Keywords.HxK", dwFileAttributes=0x80) returned 0
	[0074.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\Keywords.HxK" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\keywords.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.478] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5988
	os_tid = 0x69a4

	[0074.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\NamedUrls.HxK", dwFileAttributes=0x80) returned 0
	[0074.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Help\\NamedUrls.HxK" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\help\\namedurls.hxk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.482] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5989
	os_tid = 0x69a8

	[0074.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\ADO210.CHM", dwFileAttributes=0x80) returned 0
	[0074.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\ADO210.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\ado210.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.486] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5990
	os_tid = 0x69ac

	[0074.487] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp32.msi", dwFileAttributes=0x80) returned 0
	[0074.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp32.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmdp32.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.491] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5991
	os_tid = 0x69b0

	[0074.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp64.msi", dwFileAttributes=0x80) returned 0
	[0074.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmdp64.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmdp64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.495] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5992
	os_tid = 0x69b4

	[0074.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia32.msi", dwFileAttributes=0x80) returned 0
	[0074.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia32.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmia32.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.499] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5993
	os_tid = 0x69b8

	[0074.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia64.msi", dwFileAttributes=0x80) returned 0
	[0074.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\osmia64.msi" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\osmia64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.503] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5994
	os_tid = 0x69bc

	[0074.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\README.HTM", dwFileAttributes=0x80) returned 0
	[0074.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\1033\\README.HTM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\1033\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.507] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5995
	os_tid = 0x69c0

	[0074.507] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\AirSpace.Etw.man", dwFileAttributes=0x80) returned 0
	[0074.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\AirSpace.Etw.man" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.508] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5996
	os_tid = 0x69c4

	[0074.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF", dwFileAttributes=0x80) returned 0
	[0074.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.509] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5997
	os_tid = 0x69c8

	[0074.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as80.xsl", dwFileAttributes=0x80) returned 0
	[0074.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.514] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5998
	os_tid = 0x69cc

	[0074.516] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as90.xsl", dwFileAttributes=0x80) returned 0
	[0074.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.519] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 5999
	os_tid = 0x69d0

	[0074.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\db2v0801.xsl", dwFileAttributes=0x80) returned 0
	[0074.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.523] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6000
	os_tid = 0x69d4

	[0074.524] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\informix.xsl", dwFileAttributes=0x80) returned 0
	[0074.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.527] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6001
	os_tid = 0x69d8

	[0074.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\msjet.xsl", dwFileAttributes=0x80) returned 0
	[0074.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.531] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6002
	os_tid = 0x69dc

	[0074.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\orcl7.xsl", dwFileAttributes=0x80) returned 0
	[0074.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.535] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6003
	os_tid = 0x69e0

	[0074.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql2000.xsl", dwFileAttributes=0x80) returned 0
	[0074.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.540] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6004
	os_tid = 0x69e4

	[0074.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql70.xsl", dwFileAttributes=0x80) returned 0
	[0074.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.544] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6005
	os_tid = 0x69e8

	[0074.545] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql90.xsl", dwFileAttributes=0x80) returned 0
	[0074.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.548] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6006
	os_tid = 0x69ec

	[0074.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sqlpdw.xsl", dwFileAttributes=0x80) returned 0
	[0074.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.552] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6007
	os_tid = 0x69f0

	[0074.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sybase.xsl", dwFileAttributes=0x80) returned 0
	[0074.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.556] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6008
	os_tid = 0x69f4

	[0074.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\trdtv2r41.xsl", dwFileAttributes=0x80) returned 0
	[0074.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.562] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6009
	os_tid = 0x69f8

	[0074.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\msmdsrvi_xl.rll", dwFileAttributes=0x80) returned 0
	[0074.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\DataModel\\Resources\\1033\\msmdsrvi_xl.rll" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\datamodel\\resources\\1033\\msmdsrvi_xl.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.563] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6010
	os_tid = 0x69fc

	[0074.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\HeartbeatConfig.xml", dwFileAttributes=0x80) returned 0
	[0074.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\HeartbeatConfig.xml" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\heartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.564] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6011
	os_tid = 0x6a00

	[0074.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MUAUTH.CAB", dwFileAttributes=0x80) returned 0
	[0074.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\MUAUTH.CAB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.565] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6012
	os_tid = 0x6a04

	[0074.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\BRANDING.XML", dwFileAttributes=0x80) returned 0
	[0074.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\BRANDING.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.566] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6013
	os_tid = 0x6a08

	[0074.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10O.CHM", dwFileAttributes=0x80) returned 0
	[0074.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10O.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\pss10o.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.568] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6014
	os_tid = 0x6a0c

	[0074.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10R.CHM", dwFileAttributes=0x80) returned 0
	[0074.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\PSS10R.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.569] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6015
	os_tid = 0x6a10

	[0074.570] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\SETUP.CHM", dwFileAttributes=0x80) returned 0
	[0074.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Office Setup Controller\\Office.en-us\\SETUP.CHM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\office setup controller\\office.en-us\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.570] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6016
	os_tid = 0x6a14

	[0074.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX", dwFileAttributes=0x80) returned 0
	[0074.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_EN.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_en.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.571] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6017
	os_tid = 0x6a18

	[0074.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX", dwFileAttributes=0x80) returned 0
	[0074.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.573] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6018
	os_tid = 0x6a1c

	[0074.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX", dwFileAttributes=0x80) returned 0
	[0074.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\PROOF\\MSWDS_FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\proof\\mswds_fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.574] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6019
	os_tid = 0x6a20

	[0074.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM", dwFileAttributes=0x80) returned 0
	[0074.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\1033\\MCABOUT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\1033\\mcabout.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.578] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6020
	os_tid = 0x6a24

	[0074.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML", dwFileAttributes=0x80) returned 0
	[0074.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\DATES.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\dates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.579] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6021
	os_tid = 0x6a28

	[0074.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML", dwFileAttributes=0x80) returned 0
	[0074.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\PHONE.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\phone.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.580] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6022
	os_tid = 0x6a2c

	[0074.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML", dwFileAttributes=0x80) returned 0
	[0074.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\1033\\TIME.XML" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\1033\\time.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.581] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6023
	os_tid = 0x6a30

	[0074.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL", dwFileAttributes=0x80) returned 0
	[0074.582] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\LISTS\\BASMLA.XSL" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\lists\\basmla.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.582] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6024
	os_tid = 0x6a34

	[0074.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\METCONV.TXT", dwFileAttributes=0x80) returned 0
	[0074.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\METCONV.TXT" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\metconv.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.583] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6025
	os_tid = 0x6a38

	[0074.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\MSTAG.TLB", dwFileAttributes=0x80) returned 0
	[0074.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Smart Tag\\MSTAG.TLB" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\smart tag\\mstag.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.584] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6026
	os_tid = 0x6a3c

	[0074.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV", dwFileAttributes=0x80) returned 0
	[0074.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\RECOVR32.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\recovr32.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.585] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6027
	os_tid = 0x6a40

	[0074.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV", dwFileAttributes=0x80) returned 0
	[0074.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT532.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft532.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.587] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6028
	os_tid = 0x6a44

	[0074.637] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV", dwFileAttributes=0x80) returned 0
	[0074.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TEXTCONV\\WPFT632.CNV" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\textconv\\wpft632.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.637] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6029
	os_tid = 0x6a48

	[0074.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.ELM", dwFileAttributes=0x80) returned 0
	[0074.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\aftrnoon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.728] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6030
	os_tid = 0x6a4c

	[0074.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.INF", dwFileAttributes=0x80) returned 0
	[0074.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\AFTRNOON.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\aftrnoon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.729] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6031
	os_tid = 0x6a50

	[0074.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.731] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6032
	os_tid = 0x6a54

	[0074.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AFTRNOON\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\aftrnoon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.732] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6033
	os_tid = 0x6a58

	[0074.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.ELM", dwFileAttributes=0x80) returned 0
	[0074.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\arctic.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.734] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6034
	os_tid = 0x6a5c

	[0074.735] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.INF", dwFileAttributes=0x80) returned 0
	[0074.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\ARCTIC.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\arctic.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.735] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6035
	os_tid = 0x6a60

	[0074.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.736] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6036
	os_tid = 0x6a64

	[0074.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ARCTIC\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\arctic\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6037
	os_tid = 0x6a68

	[0074.737] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.ELM", dwFileAttributes=0x80) returned 0
	[0074.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\axis.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.737] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6038
	os_tid = 0x6a6c

	[0074.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.INF", dwFileAttributes=0x80) returned 0
	[0074.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\AXIS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\axis.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.738] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6039
	os_tid = 0x6a70

	[0074.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.740] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6040
	os_tid = 0x6a74

	[0074.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\AXIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\axis\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6041
	os_tid = 0x6a78

	[0074.741] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.ELM", dwFileAttributes=0x80) returned 0
	[0074.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\blends.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.741] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6042
	os_tid = 0x6a7c

	[0074.742] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.INF", dwFileAttributes=0x80) returned 0
	[0074.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\BLENDS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\blends.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.742] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6043
	os_tid = 0x6a80

	[0074.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.743] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6044
	os_tid = 0x6a84

	[0074.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLENDS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blends\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.744] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6045
	os_tid = 0x6a88

	[0074.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.ELM", dwFileAttributes=0x80) returned 0
	[0074.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\bluecalm.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.745] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6046
	os_tid = 0x6a8c

	[0074.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.INF", dwFileAttributes=0x80) returned 0
	[0074.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\BLUECALM.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\bluecalm.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6047
	os_tid = 0x6a90

	[0074.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.746] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6048
	os_tid = 0x6a94

	[0074.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUECALM\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\bluecalm\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.747] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6049
	os_tid = 0x6a98

	[0074.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.ELM", dwFileAttributes=0x80) returned 0
	[0074.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\blueprnt.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.749] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6050
	os_tid = 0x6a9c

	[0074.750] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.INF", dwFileAttributes=0x80) returned 0
	[0074.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\BLUEPRNT.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\blueprnt.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.750] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6051
	os_tid = 0x6aa0

	[0074.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.751] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6052
	os_tid = 0x6aa4

	[0074.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BLUEPRNT\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\blueprnt\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.752] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6053
	os_tid = 0x6aa8

	[0074.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.ELM", dwFileAttributes=0x80) returned 0
	[0074.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\boldstri.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.795] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6054
	os_tid = 0x6aac

	[0074.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.INF", dwFileAttributes=0x80) returned 0
	[0074.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\BOLDSTRI.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\boldstri.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.796] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6055
	os_tid = 0x6ab0

	[0074.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6056
	os_tid = 0x6ab4

	[0074.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BOLDSTRI\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\boldstri\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.797] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6057
	os_tid = 0x6ab8

	[0074.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.ELM", dwFileAttributes=0x80) returned 0
	[0074.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\breeze.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.798] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6058
	os_tid = 0x6abc

	[0074.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.INF", dwFileAttributes=0x80) returned 0
	[0074.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\BREEZE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\breeze.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.799] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6059
	os_tid = 0x6ac0

	[0074.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.800] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6060
	os_tid = 0x6ac4

	[0074.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\BREEZE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\breeze\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.801] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6061
	os_tid = 0x6ac8

	[0074.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.ELM", dwFileAttributes=0x80) returned 0
	[0074.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\canyon.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.802] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6062
	os_tid = 0x6acc

	[0074.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.INF", dwFileAttributes=0x80) returned 0
	[0074.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\CANYON.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\canyon.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.803] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6063
	os_tid = 0x6ad0

	[0074.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.804] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6064
	os_tid = 0x6ad4

	[0074.804] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CANYON\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\canyon\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6065
	os_tid = 0x6ad8

	[0074.805] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.ELM", dwFileAttributes=0x80) returned 0
	[0074.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\capsules.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.805] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6066
	os_tid = 0x6adc

	[0074.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.INF", dwFileAttributes=0x80) returned 0
	[0074.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\CAPSULES.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\capsules.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.806] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6067
	os_tid = 0x6ae0

	[0074.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.807] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6068
	os_tid = 0x6ae4

	[0074.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CAPSULES\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\capsules\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.808] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6069
	os_tid = 0x6ae8

	[0074.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.ELM", dwFileAttributes=0x80) returned 0
	[0074.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\cascade.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.809] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6070
	os_tid = 0x6aec

	[0074.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.INF", dwFileAttributes=0x80) returned 0
	[0074.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\CASCADE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\cascade.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.810] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6071
	os_tid = 0x6af0

	[0074.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.811] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6072
	os_tid = 0x6af4

	[0074.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CASCADE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\cascade\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.812] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6073
	os_tid = 0x6af8

	[0074.813] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.ELM", dwFileAttributes=0x80) returned 0
	[0074.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\compass.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.813] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6074
	os_tid = 0x6afc

	[0074.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.INF", dwFileAttributes=0x80) returned 0
	[0074.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\COMPASS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\compass.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.814] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6075
	os_tid = 0x6b00

	[0074.814] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6076
	os_tid = 0x6b04

	[0074.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\COMPASS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\compass\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.815] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6077
	os_tid = 0x6b08

	[0074.816] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.ELM", dwFileAttributes=0x80) returned 0
	[0074.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\concrete.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.816] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6078
	os_tid = 0x6b0c

	[0074.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.INF", dwFileAttributes=0x80) returned 0
	[0074.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\CONCRETE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\concrete.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.817] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6079
	os_tid = 0x6b10

	[0074.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.818] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6080
	os_tid = 0x6b14

	[0074.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\CONCRETE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\concrete\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.819] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6081
	os_tid = 0x6b18

	[0074.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.ELM", dwFileAttributes=0x80) returned 0
	[0074.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\deepblue.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.820] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6082
	os_tid = 0x6b1c

	[0074.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.INF", dwFileAttributes=0x80) returned 0
	[0074.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\DEEPBLUE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\deepblue.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.821] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6083
	os_tid = 0x6b20

	[0074.822] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.822] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6084
	os_tid = 0x6b24

	[0074.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\DEEPBLUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\deepblue\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.823] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6085
	os_tid = 0x6b28

	[0074.824] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.ELM", dwFileAttributes=0x80) returned 0
	[0074.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\echo.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.824] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6086
	os_tid = 0x6b2c

	[0074.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.INF", dwFileAttributes=0x80) returned 0
	[0074.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\ECHO.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\echo.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.825] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6087
	os_tid = 0x6b30

	[0074.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.827] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6088
	os_tid = 0x6b34

	[0074.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECHO\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\echo\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.828] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6089
	os_tid = 0x6b38

	[0074.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.ELM", dwFileAttributes=0x80) returned 0
	[0074.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\eclipse.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.869] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6090
	os_tid = 0x6b3c

	[0074.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.INF", dwFileAttributes=0x80) returned 0
	[0074.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\ECLIPSE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\eclipse.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.870] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6091
	os_tid = 0x6b40

	[0074.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.871] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6092
	os_tid = 0x6b44

	[0074.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ECLIPSE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\eclipse\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.872] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6093
	os_tid = 0x6b48

	[0074.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.ELM", dwFileAttributes=0x80) returned 0
	[0074.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\edge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.873] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6094
	os_tid = 0x6b4c

	[0074.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.INF", dwFileAttributes=0x80) returned 0
	[0074.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\EDGE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\edge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.874] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6095
	os_tid = 0x6b50

	[0074.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.875] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6096
	os_tid = 0x6b54

	[0074.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\edge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.876] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6097
	os_tid = 0x6b58

	[0074.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.ELM", dwFileAttributes=0x80) returned 0
	[0074.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\evrgreen.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.877] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6098
	os_tid = 0x6b5c

	[0074.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.INF", dwFileAttributes=0x80) returned 0
	[0074.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\EVRGREEN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\evrgreen.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.877] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6099
	os_tid = 0x6b60

	[0074.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.879] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6100
	os_tid = 0x6b64

	[0074.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EVRGREEN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\evrgreen\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.880] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6101
	os_tid = 0x6b68

	[0074.880] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.ELM", dwFileAttributes=0x80) returned 0
	[0074.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\expeditn.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.881] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6102
	os_tid = 0x6b6c

	[0074.881] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.INF", dwFileAttributes=0x80) returned 0
	[0074.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\EXPEDITN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\expeditn.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.881] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6103
	os_tid = 0x6b70

	[0074.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.882] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6104
	os_tid = 0x6b74

	[0074.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\EXPEDITN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\expeditn\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.883] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6105
	os_tid = 0x6b78

	[0074.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.ELM", dwFileAttributes=0x80) returned 0
	[0074.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ice.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.885] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6106
	os_tid = 0x6b7c

	[0074.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.INF", dwFileAttributes=0x80) returned 0
	[0074.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\ICE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\ice.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6107
	os_tid = 0x6b80

	[0074.886] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.886] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6108
	os_tid = 0x6b84

	[0074.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\ICE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ice\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.887] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6109
	os_tid = 0x6b88

	[0074.888] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.ELM", dwFileAttributes=0x80) returned 0
	[0074.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\indust.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.889] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6110
	os_tid = 0x6b8c

	[0074.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.INF", dwFileAttributes=0x80) returned 0
	[0074.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\INDUST.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\indust.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6111
	os_tid = 0x6b90

	[0074.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.891] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6112
	os_tid = 0x6b94

	[0074.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\INDUST\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\indust\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.892] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6113
	os_tid = 0x6b98

	[0074.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.ELM", dwFileAttributes=0x80) returned 0
	[0074.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\iris.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.893] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6114
	os_tid = 0x6b9c

	[0074.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.INF", dwFileAttributes=0x80) returned 0
	[0074.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\IRIS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\iris.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.894] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6115
	os_tid = 0x6ba0

	[0074.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.895] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6116
	os_tid = 0x6ba4

	[0074.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\IRIS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\iris\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6117
	os_tid = 0x6ba8

	[0074.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.ELM", dwFileAttributes=0x80) returned 0
	[0074.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\journal.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.896] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6118
	os_tid = 0x6bac

	[0074.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.INF", dwFileAttributes=0x80) returned 0
	[0074.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\JOURNAL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\journal.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.897] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6119
	os_tid = 0x6bb0

	[0074.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.901] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6120
	os_tid = 0x6bb4

	[0074.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\JOURNAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\journal\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.902] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6121
	os_tid = 0x6bb8

	[0074.944] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.ELM", dwFileAttributes=0x80) returned 0
	[0074.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\layers.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.944] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6122
	os_tid = 0x6bbc

	[0074.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.INF", dwFileAttributes=0x80) returned 0
	[0074.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\LAYERS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\layers.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.945] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6123
	os_tid = 0x6bc0

	[0074.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.946] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6124
	os_tid = 0x6bc4

	[0074.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LAYERS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\layers\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.947] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6125
	os_tid = 0x6bc8

	[0074.948] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.ELM", dwFileAttributes=0x80) returned 0
	[0074.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\level.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.948] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6126
	os_tid = 0x6bcc

	[0074.949] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.INF", dwFileAttributes=0x80) returned 0
	[0074.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\LEVEL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\level.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.950] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6127
	os_tid = 0x6bd0

	[0074.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.951] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6128
	os_tid = 0x6bd4

	[0074.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\LEVEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\level\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.952] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6129
	os_tid = 0x6bd8

	[0074.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.ELM", dwFileAttributes=0x80) returned 0
	[0074.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\network.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.953] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6130
	os_tid = 0x6bdc

	[0074.954] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.INF", dwFileAttributes=0x80) returned 0
	[0074.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\NETWORK.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\network.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.954] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6131
	os_tid = 0x6be0

	[0074.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.955] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6132
	os_tid = 0x6be4

	[0074.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\NETWORK\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\network\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.956] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6133
	os_tid = 0x6be8

	[0074.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.ELM", dwFileAttributes=0x80) returned 0
	[0074.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\papyrus.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.957] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6134
	os_tid = 0x6bec

	[0074.957] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.INF", dwFileAttributes=0x80) returned 0
	[0074.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PAPYRUS.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\papyrus.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6135
	os_tid = 0x6bf0

	[0074.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.958] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6136
	os_tid = 0x6bf4

	[0074.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PAPYRUS\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\papyrus\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.959] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6137
	os_tid = 0x6bf8

	[0074.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.ELM", dwFileAttributes=0x80) returned 0
	[0074.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\pixel.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.960] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6138
	os_tid = 0x6bfc

	[0074.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.INF", dwFileAttributes=0x80) returned 0
	[0074.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PIXEL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\pixel.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.961] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6139
	os_tid = 0x6c04

	[0074.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.965] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6140
	os_tid = 0x6c08

	[0074.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PIXEL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\pixel\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.966] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6141
	os_tid = 0x6c0c

	[0074.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.967] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6142
	os_tid = 0x6c10

	[0074.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.ELM", dwFileAttributes=0x80) returned 0
	[0074.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\profile.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.968] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6143
	os_tid = 0x6c14

	[0074.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.INF", dwFileAttributes=0x80) returned 0
	[0074.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\PROFILE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\profile.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6144
	os_tid = 0x6c18

	[0074.969] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\PROFILE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\profile\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.969] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6145
	os_tid = 0x6c1c

	[0074.970] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.970] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6146
	os_tid = 0x6c20

	[0074.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.ELM", dwFileAttributes=0x80) returned 0
	[0074.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\quad.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.971] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6147
	os_tid = 0x6c24

	[0074.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.INF", dwFileAttributes=0x80) returned 0
	[0074.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\QUAD.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\quad.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6148
	os_tid = 0x6c28

	[0074.972] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\QUAD\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\quad\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.972] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6149
	os_tid = 0x6c2c

	[0074.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.973] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6150
	os_tid = 0x6c30

	[0074.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.ELM", dwFileAttributes=0x80) returned 0
	[0074.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\radial.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.974] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6151
	os_tid = 0x6c34

	[0074.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.INF", dwFileAttributes=0x80) returned 0
	[0074.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\RADIAL.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\radial.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.975] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6152
	os_tid = 0x6c38

	[0074.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RADIAL\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\radial\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.976] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6153
	os_tid = 0x6c3c

	[0074.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0074.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.977] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6154
	os_tid = 0x6c40

	[0074.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.ELM", dwFileAttributes=0x80) returned 0
	[0074.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\refined.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.978] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6155
	os_tid = 0x6c44

	[0074.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.INF", dwFileAttributes=0x80) returned 0
	[0074.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\REFINED.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\refined.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.979] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6156
	os_tid = 0x6c48

	[0074.980] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0074.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\REFINED\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\refined\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0074.980] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6157
	os_tid = 0x6c4c

	[0075.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.017] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6158
	os_tid = 0x6c50

	[0075.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.ELM", dwFileAttributes=0x80) returned 0
	[0075.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ricepapr.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.018] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6159
	os_tid = 0x6c54

	[0075.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.INF", dwFileAttributes=0x80) returned 0
	[0075.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\RICEPAPR.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\ricepapr.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.019] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6160
	os_tid = 0x6c58

	[0075.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RICEPAPR\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ricepapr\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.020] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6161
	os_tid = 0x6c5c

	[0075.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6162
	os_tid = 0x6c60

	[0075.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.ELM", dwFileAttributes=0x80) returned 0
	[0075.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ripple.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.021] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6163
	os_tid = 0x6c64

	[0075.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.INF", dwFileAttributes=0x80) returned 0
	[0075.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\RIPPLE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\ripple.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.022] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6164
	os_tid = 0x6c68

	[0075.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RIPPLE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\ripple\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.023] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6165
	os_tid = 0x6c6c

	[0075.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.024] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6166
	os_tid = 0x6c70

	[0075.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.ELM", dwFileAttributes=0x80) returned 0
	[0075.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\rmnsque.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.025] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6167
	os_tid = 0x6c74

	[0075.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.INF", dwFileAttributes=0x80) returned 0
	[0075.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\RMNSQUE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\rmnsque.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.026] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6168
	os_tid = 0x6c78

	[0075.027] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\RMNSQUE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\rmnsque\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.027] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6169
	os_tid = 0x6c7c

	[0075.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.031] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6170
	os_tid = 0x6c80

	[0075.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.ELM", dwFileAttributes=0x80) returned 0
	[0075.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\satin.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.032] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6171
	os_tid = 0x6c84

	[0075.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.INF", dwFileAttributes=0x80) returned 0
	[0075.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\SATIN.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\satin.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.033] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6172
	os_tid = 0x6c88

	[0075.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SATIN\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\satin\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.034] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6173
	os_tid = 0x6c8c

	[0075.035] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6174
	os_tid = 0x6c90

	[0075.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.ELM", dwFileAttributes=0x80) returned 0
	[0075.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\sky.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.036] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6175
	os_tid = 0x6c94

	[0075.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.INF", dwFileAttributes=0x80) returned 0
	[0075.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\SKY.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\sky.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.037] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6176
	os_tid = 0x6c98

	[0075.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SKY\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sky\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.038] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6177
	os_tid = 0x6c9c

	[0075.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.039] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6178
	os_tid = 0x6ca0

	[0075.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.ELM", dwFileAttributes=0x80) returned 0
	[0075.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\slate.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.040] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6179
	os_tid = 0x6ca4

	[0075.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.INF", dwFileAttributes=0x80) returned 0
	[0075.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\SLATE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\slate.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.042] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6180
	os_tid = 0x6ca8

	[0075.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SLATE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\slate\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.042] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6181
	os_tid = 0x6cac

	[0075.043] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.044] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6182
	os_tid = 0x6cb0

	[0075.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.ELM", dwFileAttributes=0x80) returned 0
	[0075.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\sonora.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.045] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6183
	os_tid = 0x6cb4

	[0075.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.INF", dwFileAttributes=0x80) returned 0
	[0075.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\SONORA.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\sonora.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.046] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6184
	os_tid = 0x6cb8

	[0075.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SONORA\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sonora\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.046] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6185
	os_tid = 0x6cbc

	[0075.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.149] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6186
	os_tid = 0x6cc0

	[0075.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.ELM", dwFileAttributes=0x80) returned 0
	[0075.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\spring.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.150] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6187
	os_tid = 0x6cc4

	[0075.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.INF", dwFileAttributes=0x80) returned 0
	[0075.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\SPRING.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\spring.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.151] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6188
	os_tid = 0x6cc8

	[0075.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SPRING\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\spring\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.152] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6189
	os_tid = 0x6ccc

	[0075.153] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.154] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6190
	os_tid = 0x6cd0

	[0075.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.ELM", dwFileAttributes=0x80) returned 0
	[0075.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\strtedge.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.155] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6191
	os_tid = 0x6cd4

	[0075.156] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.INF", dwFileAttributes=0x80) returned 0
	[0075.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\STRTEDGE.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\strtedge.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.156] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6192
	os_tid = 0x6cd8

	[0075.157] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STRTEDGE\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\strtedge\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.157] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6193
	os_tid = 0x6cdc

	[0075.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6194
	os_tid = 0x6ce0

	[0075.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.ELM", dwFileAttributes=0x80) returned 0
	[0075.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\studio.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.161] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6195
	os_tid = 0x6ce4

	[0075.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.INF", dwFileAttributes=0x80) returned 0
	[0075.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\STUDIO.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\studio.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.162] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6196
	os_tid = 0x6ce8

	[0075.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\STUDIO\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\studio\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.163] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6197
	os_tid = 0x6cec

	[0075.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.167] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6198
	os_tid = 0x6cf0

	[0075.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.ELM", dwFileAttributes=0x80) returned 0
	[0075.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\sumipntg.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.168] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6199
	os_tid = 0x6cf4

	[0075.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.INF", dwFileAttributes=0x80) returned 0
	[0075.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\SUMIPNTG.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\sumipntg.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.169] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6200
	os_tid = 0x6cf8

	[0075.169] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\SUMIPNTG\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\sumipntg\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.170] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6201
	os_tid = 0x6cfc

	[0075.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\THEMES.INF", dwFileAttributes=0x80) returned 0
	[0075.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\THEMES.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\themes.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.171] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6202
	os_tid = 0x6d00

	[0075.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.172] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6203
	os_tid = 0x6d04

	[0075.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.173] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6204
	os_tid = 0x6d08

	[0075.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.ELM", dwFileAttributes=0x80) returned 0
	[0075.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\water.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.174] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6205
	os_tid = 0x6d0c

	[0075.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.INF", dwFileAttributes=0x80) returned 0
	[0075.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATER\\WATER.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\water\\water.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.175] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6206
	os_tid = 0x6d10

	[0075.175] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\PREVIEW.GIF", dwFileAttributes=0x80) returned 0
	[0075.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\PREVIEW.GIF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\preview.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.176] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6207
	os_tid = 0x6d14

	[0075.176] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\THMBNAIL.PNG", dwFileAttributes=0x80) returned 0
	[0075.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\THMBNAIL.PNG" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\thmbnail.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6208
	os_tid = 0x6d18

	[0075.177] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.ELM", dwFileAttributes=0x80) returned 0
	[0075.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.ELM" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\watermar.elm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.177] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6209
	os_tid = 0x6d1c

	[0075.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.INF", dwFileAttributes=0x80) returned 0
	[0075.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\THEMES16\\WATERMAR\\WATERMAR.INF" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\themes16\\watermar\\watermar.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.178] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6210
	os_tid = 0x6d20

	[0075.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS", dwFileAttributes=0x80) returned 0
	[0075.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENES\\MSB1ENES.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enes\\msb1enes.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.179] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6211
	os_tid = 0x6d24

	[0075.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS", dwFileAttributes=0x80) returned 0
	[0075.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ENFR\\MSB1ENFR.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\enfr\\msb1enfr.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.180] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6212
	os_tid = 0x6d28

	[0075.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS", dwFileAttributes=0x80) returned 0
	[0075.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\MSB1ESEN.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\msb1esen.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.181] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6213
	os_tid = 0x6d2c

	[0075.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX", dwFileAttributes=0x80) returned 0
	[0075.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\ESEN\\WT61ES.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\esen\\wt61es.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.182] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6214
	os_tid = 0x6d30

	[0075.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS", dwFileAttributes=0x80) returned 0
	[0075.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\MSB1FREN.ITS" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\msb1fren.its"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.249] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6215
	os_tid = 0x6d34

	[0075.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX", dwFileAttributes=0x80) returned 0
	[0075.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\FREN\\WT61FR.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\fren\\wt61fr.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.250] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6216
	os_tid = 0x6d38

	[0075.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX", dwFileAttributes=0x80) returned 0
	[0075.251] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\TRANSLAT\\MSB1CACH.LEX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\translat\\msb1cach.lex"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.251] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6217
	os_tid = 0x6d3c

	[0075.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX", dwFileAttributes=0x80) returned 0
	[0075.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\BIGFONT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\bigfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.255] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6218
	os_tid = 0x6d40

	[0075.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX", dwFileAttributes=0x80) returned 0
	[0075.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\CHINESET.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\chineset.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.268] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6219
	os_tid = 0x6d44

	[0075.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX", dwFileAttributes=0x80) returned 0
	[0075.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\EXTFONT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\extfont.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.272] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6220
	os_tid = 0x6d48

	[0075.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX", dwFileAttributes=0x80) returned 0
	[0075.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\GBCBIG.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\gbcbig.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.276] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6221
	os_tid = 0x6d4c

	[0075.277] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX", dwFileAttributes=0x80) returned 0
	[0075.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\IC-TXT.SHX" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\ic-txt.shx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.280] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6222
	os_tid = 0x6d50

	[0075.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP", dwFileAttributes=0x80) returned 0
	[0075.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\Visio Shared\\Fonts\\ICAD.FMP" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\visio shared\\fonts\\icad.fmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0075.285] CloseHandle (hObject=0xffffffffffffffff) returned 1

Thread:
	id = 6223
	os_tid = 0x6d54


Process:
	id = "6"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x476c8000"
	os_pid = "0x718"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 45
	os_tid = 0xcd4


Thread:
	id = 46
	os_tid = 0xc50


Thread:
	id = 47
	os_tid = 0xc10


Thread:
	id = 48
	os_tid = 0x608


Thread:
	id = 49
	os_tid = 0x638


Thread:
	id = 50
	os_tid = 0x77c


Thread:
	id = 51
	os_tid = 0x774


Thread:
	id = 52
	os_tid = 0x754


Thread:
	id = 53
	os_tid = 0x74c


Thread:
	id = 54
	os_tid = 0x748


Thread:
	id = 55
	os_tid = 0x740


Thread:
	id = 56
	os_tid = 0x71c


Thread:
	id = 57
	os_tid = 0xd80

	[0039.395] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0039.396] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="LoadLibraryA") returned 0x7ff92fdee490
	[0039.396] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff9232d0000
	[0039.399] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff931520000
	[0039.399] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff9315e0000
	[0039.399] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff9300e0000
	[0039.406] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff92da00000
	[0039.406] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLastError") returned 0x7ff92fde33c0
	[0039.406] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualFree") returned 0x7ff92fdea3e0
	[0039.406] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptExportKey") returned 0x7ff931535410
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="DeleteFileW") returned 0x7ff92fdf2130
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetDriveTypeW") returned 0x7ff92fdf22c0
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCommandLineW") returned 0x7ff92fdedbe0
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetStartupInfoW") returned 0x7ff92fdebf50
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindNextFileW") returned 0x7ff92fdf2230
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualAlloc") returned 0x7ff92fde97f0
	[0039.407] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameA") returned 0x7ff9315622e0
	[0039.407] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ExitProcess") returned 0x7ff92fdec0d0
	[0039.408] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff92fe07cd0
	[0039.408] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessA") returned 0x7ff92fdeb190
	[0039.408] GetProcAddress (hModule=0x7ff92da00000, lpProcName="GetIpNetTable") returned 0x7ff92da0fcc0
	[0039.408] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetVersionExW") returned 0x7ff92fde9a70
	[0039.408] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff92fe07cc0
	[0039.408] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff92fdee860
	[0039.408] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameW") returned 0x7ff9315353c0
	[0039.408] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ReadFile") returned 0x7ff92fdf2480
	[0039.409] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegQueryValueExA") returned 0x7ff9315354e0
	[0039.409] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CloseHandle") returned 0x7ff92fdf1ea0
	[0039.409] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegSetValueExW") returned 0x7ff931535370
	[0039.409] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegCloseKey") returned 0x7ff931534c50
	[0039.409] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileA") returned 0x7ff92fe2a370
	[0039.409] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesW") returned 0x7ff92fdf24f0
	[0039.409] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WinExec") returned 0x7ff92fe2e3b0
	[0039.409] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDeriveKey") returned 0x7ff93154a740
	[0039.410] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptGenKey") returned 0x7ff931539be0
	[0039.410] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Sleep") returned 0x7ff92fde3410
	[0039.410] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCurrentProcess") returned 0x7ff92fdf1e00
	[0039.410] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteW") returned 0x7ff9301df5d0
	[0039.410] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSize") returned 0x7ff92fdf2320
	[0039.410] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GlobalAlloc") returned 0x7ff92fde7fb0
	[0039.410] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindClose") returned 0x7ff92fdf2160
	[0039.410] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WaitForMultipleObjects") returned 0x7ff92fdf2070
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameA") returned 0x7ff92fdee000
	[0039.411] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteA") returned 0x7ff9302a1600
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleHandleA") returned 0x7ff92fdec1a0
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameW") returned 0x7ff92fdebfa0
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileA") returned 0x7ff92fdf20f0
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSizeEx") returned 0x7ff92fdf2330
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WriteFile") returned 0x7ff92fdf2570
	[0039.411] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLogicalDrives") returned 0x7ff92fde8dd0
	[0039.412] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetEnumResourceW") returned 0x7ff9232d12d0
	[0039.412] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExW") returned 0x7ff931534aa0
	[0039.412] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetCloseEnum") returned 0x7ff9232d14f0
	[0039.412] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff92fdee9f0
	[0039.412] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesA") returned 0x7ff92fdf24e0
	[0039.412] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExA") returned 0x7ff9315353b0
	[0039.412] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointer") returned 0x7ff92fdf2510
	[0039.412] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetTickCount") returned 0x7ff92fde33d0
	[0039.412] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesW") returned 0x7ff92fdf2300
	[0039.413] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindFirstFileW") returned 0x7ff92fdf21e0
	[0039.413] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptAcquireContextW") returned 0x7ff931535a10
	[0039.413] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="MoveFileExW") returned 0x7ff92fdeec60
	[0039.413] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetOpenEnumW") returned 0x7ff9232d15e0
	[0039.413] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoInitialize") returned 0x7ff9315e7e20
	[0039.413] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDecrypt") returned 0x7ff931539b10
	[0039.413] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptImportKey") returned 0x7ff9315353f0
	[0039.413] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointerEx") returned 0x7ff92fdf2520
	[0039.414] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileW") returned 0x7ff92fdf2770
	[0039.414] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FreeLibrary") returned 0x7ff92fdebf60
	[0039.414] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessW") returned 0x7ff92fdeba30
	[0039.414] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateDirectoryW") returned 0x7ff92fdf20d0
	[0039.414] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateThread") returned 0x7ff92fde9940
	[0039.414] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDestroyKey") returned 0x7ff9315357e0
	[0039.414] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoCreateInstance") returned 0x7ff92fad5110
	[0039.414] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileW") returned 0x7ff92fdf2100
	[0039.415] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesA") returned 0x7ff92fdf22d0
	[0039.415] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptEncrypt") returned 0x7ff93153a1a0
	[0039.415] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegDeleteValueW") returned 0x7ff9315382d0
	[0039.415] GetVersionExW (in: lpVersionInformation=0x65a57ffb40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x65a57ffb40*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0039.415] GetWindowsDirectoryW (in: lpBuffer=0x65a57ffbf0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0039.415] SetLastError (dwErrCode=0x0) 
	[0039.415] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0039.415] GetLastError () returned 0x20
	[0039.415] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0039.415] Sleep (dwMilliseconds=0x1388) 
	[0044.436] Sleep (dwMilliseconds=0x2328) 
	[0053.562] GetWindowsDirectoryW (in: lpBuffer=0x65a57ffbf0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0053.562] SetLastError (dwErrCode=0x0) 
	[0053.562] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0053.562] GetLastError () returned 0x20
	[0053.562] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0053.563] Sleep (dwMilliseconds=0x2328) 
	[0062.766] GetWindowsDirectoryW (in: lpBuffer=0x65a57ffbf0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0062.766] SetLastError (dwErrCode=0x0) 
	[0062.766] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0062.767] GetLastError () returned 0x20
	[0062.767] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0062.767] Sleep (dwMilliseconds=0x2328) 
	[0071.853] GetWindowsDirectoryW (in: lpBuffer=0x65a57ffbf0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0071.853] SetLastError (dwErrCode=0x0) 
	[0071.853] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0071.853] GetLastError () returned 0x20
	[0071.853] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0071.854] Sleep (dwMilliseconds=0x2328) 

Thread:
	id = 213
	os_tid = 0x3d8


Thread:
	id = 252
	os_tid = 0x1030


Thread:
	id = 269
	os_tid = 0x1074


Process:
	id = "7"
	image_name = "taskhostw.exe"
	filename = "c:\\windows\\system32\\taskhostw.exe"
	page_root = "0x4bc4c000"
	os_pid = "0x7ac"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "taskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 58
	os_tid = 0xb64


Thread:
	id = 59
	os_tid = 0x98c


Thread:
	id = 60
	os_tid = 0x8ec


Thread:
	id = 61
	os_tid = 0x8b4


Thread:
	id = 62
	os_tid = 0xb78


Thread:
	id = 63
	os_tid = 0xb14


Thread:
	id = 64
	os_tid = 0x830


Thread:
	id = 65
	os_tid = 0x82c


Thread:
	id = 66
	os_tid = 0x820


Thread:
	id = 67
	os_tid = 0x818


Thread:
	id = 68
	os_tid = 0x814


Thread:
	id = 69
	os_tid = 0x780


Thread:
	id = 70
	os_tid = 0x6b0


Thread:
	id = 71
	os_tid = 0x680


Thread:
	id = 72
	os_tid = 0x40c


Thread:
	id = 73
	os_tid = 0x7b0


Thread:
	id = 74
	os_tid = 0xf08

	[0039.908] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0039.908] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="LoadLibraryA") returned 0x7ff92fdee490
	[0039.908] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff9232d0000
	[0039.913] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff931520000
	[0039.913] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff9315e0000
	[0039.914] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff9300e0000
	[0039.922] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff92da00000
	[0039.926] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLastError") returned 0x7ff92fde33c0
	[0039.926] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualFree") returned 0x7ff92fdea3e0
	[0039.926] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptExportKey") returned 0x7ff931535410
	[0039.927] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="DeleteFileW") returned 0x7ff92fdf2130
	[0039.927] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetDriveTypeW") returned 0x7ff92fdf22c0
	[0039.927] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCommandLineW") returned 0x7ff92fdedbe0
	[0039.927] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetStartupInfoW") returned 0x7ff92fdebf50
	[0039.927] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindNextFileW") returned 0x7ff92fdf2230
	[0039.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualAlloc") returned 0x7ff92fde97f0
	[0039.928] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameA") returned 0x7ff9315622e0
	[0039.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ExitProcess") returned 0x7ff92fdec0d0
	[0039.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff92fe07cd0
	[0039.928] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessA") returned 0x7ff92fdeb190
	[0039.929] GetProcAddress (hModule=0x7ff92da00000, lpProcName="GetIpNetTable") returned 0x7ff92da0fcc0
	[0039.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetVersionExW") returned 0x7ff92fde9a70
	[0039.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff92fe07cc0
	[0039.929] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff92fdee860
	[0039.929] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameW") returned 0x7ff9315353c0
	[0039.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ReadFile") returned 0x7ff92fdf2480
	[0039.930] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegQueryValueExA") returned 0x7ff9315354e0
	[0039.930] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CloseHandle") returned 0x7ff92fdf1ea0
	[0039.930] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegSetValueExW") returned 0x7ff931535370
	[0039.930] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegCloseKey") returned 0x7ff931534c50
	[0039.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileA") returned 0x7ff92fe2a370
	[0039.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesW") returned 0x7ff92fdf24f0
	[0039.931] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WinExec") returned 0x7ff92fe2e3b0
	[0039.931] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDeriveKey") returned 0x7ff93154a740
	[0039.931] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptGenKey") returned 0x7ff931539be0
	[0039.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Sleep") returned 0x7ff92fde3410
	[0039.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCurrentProcess") returned 0x7ff92fdf1e00
	[0039.932] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteW") returned 0x7ff9301df5d0
	[0039.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSize") returned 0x7ff92fdf2320
	[0039.932] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GlobalAlloc") returned 0x7ff92fde7fb0
	[0039.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindClose") returned 0x7ff92fdf2160
	[0039.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WaitForMultipleObjects") returned 0x7ff92fdf2070
	[0039.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameA") returned 0x7ff92fdee000
	[0039.933] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteA") returned 0x7ff9302a1600
	[0039.933] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleHandleA") returned 0x7ff92fdec1a0
	[0039.940] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameW") returned 0x7ff92fdebfa0
	[0039.940] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileA") returned 0x7ff92fdf20f0
	[0039.941] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSizeEx") returned 0x7ff92fdf2330
	[0039.941] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WriteFile") returned 0x7ff92fdf2570
	[0039.941] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLogicalDrives") returned 0x7ff92fde8dd0
	[0039.941] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetEnumResourceW") returned 0x7ff9232d12d0
	[0039.941] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExW") returned 0x7ff931534aa0
	[0039.941] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetCloseEnum") returned 0x7ff9232d14f0
	[0039.942] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff92fdee9f0
	[0039.942] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesA") returned 0x7ff92fdf24e0
	[0039.942] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExA") returned 0x7ff9315353b0
	[0039.942] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointer") returned 0x7ff92fdf2510
	[0039.942] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetTickCount") returned 0x7ff92fde33d0
	[0039.943] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesW") returned 0x7ff92fdf2300
	[0039.943] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindFirstFileW") returned 0x7ff92fdf21e0
	[0039.943] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptAcquireContextW") returned 0x7ff931535a10
	[0039.943] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="MoveFileExW") returned 0x7ff92fdeec60
	[0039.943] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetOpenEnumW") returned 0x7ff9232d15e0
	[0039.944] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoInitialize") returned 0x7ff9315e7e20
	[0039.944] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDecrypt") returned 0x7ff931539b10
	[0039.944] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptImportKey") returned 0x7ff9315353f0
	[0039.944] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointerEx") returned 0x7ff92fdf2520
	[0039.944] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileW") returned 0x7ff92fdf2770
	[0039.945] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FreeLibrary") returned 0x7ff92fdebf60
	[0039.945] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessW") returned 0x7ff92fdeba30
	[0039.945] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateDirectoryW") returned 0x7ff92fdf20d0
	[0039.945] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateThread") returned 0x7ff92fde9940
	[0039.945] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDestroyKey") returned 0x7ff9315357e0
	[0039.946] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoCreateInstance") returned 0x7ff92fad5110
	[0039.946] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileW") returned 0x7ff92fdf2100
	[0039.946] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesA") returned 0x7ff92fdf22d0
	[0039.946] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptEncrypt") returned 0x7ff93153a1a0
	[0039.946] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegDeleteValueW") returned 0x7ff9315382d0
	[0039.946] GetVersionExW (in: lpVersionInformation=0x31372ff440*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x31372ff440*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0039.946] GetWindowsDirectoryW (in: lpBuffer=0x31372ff4f0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0039.947] SetLastError (dwErrCode=0x0) 
	[0039.947] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0039.947] GetLastError () returned 0x20
	[0039.947] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0039.947] Sleep (dwMilliseconds=0x1388) 
	[0044.975] Sleep (dwMilliseconds=0x2328) 
	[0054.183] GetWindowsDirectoryW (in: lpBuffer=0x31372ff4f0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0054.183] SetLastError (dwErrCode=0x0) 
	[0054.183] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0054.183] GetLastError () returned 0x20
	[0054.183] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0054.183] Sleep (dwMilliseconds=0x2328) 
	[0063.279] GetWindowsDirectoryW (in: lpBuffer=0x31372ff4f0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0063.279] SetLastError (dwErrCode=0x0) 
	[0063.279] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.279] GetLastError () returned 0x20
	[0063.279] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.279] Sleep (dwMilliseconds=0x2328) 
	[0072.389] GetWindowsDirectoryW (in: lpBuffer=0x31372ff4f0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0072.390] SetLastError (dwErrCode=0x0) 
	[0072.390] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.390] GetLastError () returned 0x20
	[0072.390] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.390] Sleep (dwMilliseconds=0x2328) 

Thread:
	id = 105
	os_tid = 0xf00


Process:
	id = "8"
	image_name = "reg.exe"
	filename = "c:\\windows\\system32\\reg.exe"
	page_root = "0x6b17000"
	os_pid = "0x174"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0x1b4"
	cmd_line = "REG  ADD \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"svchos\" /t REG_SZ /d \"C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe\" /f"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 75
	os_tid = 0xee8

	[0040.157] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff792660000
	[0040.157] __set_app_type (_Type=0x1) 
	[0040.157] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff79266e1f0) returned 0x0
	[0040.157] __wgetmainargs (in: _Argc=0x7ff792672048, _Argv=0x7ff792672050, _Env=0x7ff792672058, _DoWildCard=0, _StartInfo=0x7ff792672064 | out: _Argc=0x7ff792672048, _Argv=0x7ff792672050, _Env=0x7ff792672058) returned 0
	[0040.157] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 1
	[0040.158] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
	[0040.158] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x941187f728 | out: phkResult=0x941187f728*=0x0) returned 0x2
	[0040.159] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="ADD", cchCount1=-1, lpString2="ADD", cchCount2=-1) returned 2
	[0040.159] lstrlenW (lpString="-?|/?|-h|/h") returned 11
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x18) returned 0x22f83e72f70
	[0040.159] lstrlenW (lpString="") returned 0
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x2) returned 0x22f83e741b0
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e741d0
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x18) returned 0x22f83e74de0
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e74e00
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e74e30
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e74e60
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e74a00
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x18) returned 0x22f83e74a30
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e74a50
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78f90
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.159] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78fc0
	[0040.159] GetProcessHeap () returned 0x22f83e70000
	[0040.160] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78cf0
	[0040.160] GetProcessHeap () returned 0x22f83e70000
	[0040.160] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x18) returned 0x22f83e74a80
	[0040.160] GetProcessHeap () returned 0x22f83e70000
	[0040.160] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78f00
	[0040.160] GetProcessHeap () returned 0x22f83e70000
	[0040.160] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78e10
	[0040.160] GetProcessHeap () returned 0x22f83e70000
	[0040.160] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78f60
	[0040.160] GetProcessHeap () returned 0x22f83e70000
	[0040.160] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x20) returned 0x22f83e78db0
	[0040.160] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0040.161] GetProcessHeap () returned 0x22f83e70000
	[0040.161] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x18) returned 0x22f83e72a50
	[0040.161] _memicmp (_Buf1=0x22f83e72a50, _Buf2=0x7ff7926701c8, _Size=0x7) returned 0
	[0040.161] GetProcessHeap () returned 0x22f83e70000
	[0040.161] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x1e) returned 0x22f83e78d80
	[0040.161] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63
	[0040.161] GetProcessHeap () returned 0x22f83e70000
	[0040.161] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x18) returned 0x22f83e74d40
	[0040.161] _memicmp (_Buf1=0x22f83e74d40, _Buf2=0x7ff7926701c8, _Size=0x7) returned 0
	[0040.161] GetProcessHeap () returned 0x22f83e70000
	[0040.161] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x86) returned 0x22f83e74910
	[0040.161] _vsnwprintf (in: _Buffer=0x22f83e78d80, _BufferCount=0xe, _Format="|%s|", _ArgList=0x941187f568 | out: _Buffer="|-?|/?|-h|/h|") returned 13
	[0040.161] _vsnwprintf (in: _Buffer=0x22f83e74910, _BufferCount=0x42, _Format="|%s|", _ArgList=0x941187f568 | out: _Buffer="|HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run|") returned 65
	[0040.161] lstrlenW (lpString="|-?|/?|-h|/h|") returned 13
	[0040.161] lstrlenW (lpString="|HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run|") returned 65
	[0040.161] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.161] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63
	[0040.161] GetProcessHeap () returned 0x22f83e70000
	[0040.161] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x80) returned 0x22f83e73ef0
	[0040.161] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63
	[0040.161] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
	[0040.161] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0
	[0040.161] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x59) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0040.162] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0
	[0040.163] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0
	[0040.163] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63
	[0040.163] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3
	[0040.163] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63
	[0040.163] lstrlenW (lpString="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 63
	[0040.163] StrChrIW (lpStart="HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
	[0040.163] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19
	[0040.163] GetProcessHeap () returned 0x22f83e70000
	[0040.163] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x28) returned 0x22f83e78cc0
	[0040.163] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3
	[0040.163] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKEY_CURRENT_USER", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 2
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.163] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Run"
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.163] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Run"
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.163] StrChrIW (lpStart="Windows\\CurrentVersion\\Run", wMatch=0x5c) returned="\\CurrentVersion\\Run"
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.163] StrChrIW (lpStart="CurrentVersion\\Run", wMatch=0x5c) returned="\\Run"
	[0040.163] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.164] StrChrIW (lpStart="Run", wMatch=0x5c) returned 0x0
	[0040.164] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.164] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.164] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.164] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x5c) returned 0x22f83e746b0
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x88) returned 0x22f83e74230
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78cc0) returned 1
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78cc0) returned 0x28
	[0040.164] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78cc0) returned 1
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e73ef0) returned 1
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e73ef0) returned 0x80
	[0040.164] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e73ef0) returned 1
	[0040.164] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/v", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 2
	[0040.164] lstrlenW (lpString="svchos") returned 6
	[0040.164] GetProcessHeap () returned 0x22f83e70000
	[0040.164] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0xe) returned 0x22f83e74d60
	[0040.164] lstrlenW (lpString="svchos") returned 6
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x76) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x68) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0
	[0040.164] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0040.164] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0040.164] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0040.164] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0040.164] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/t", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 2
	[0040.164] StrDupW (lpSrch="REG_SZ") returned="REG_SZ"
	[0040.164] lstrlenW (lpString="REG_SZ") returned 6
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0
	[0040.164] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0
	[0040.165] StrChrW (lpStart=" \x09", wMatch=0x47) returned 0x0
	[0040.165] StrChrW (lpStart=" \x09", wMatch=0x5f) returned 0x0
	[0040.165] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0
	[0040.165] StrChrW (lpStart=" \x09", wMatch=0x5a) returned 0x0
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="REG_SZ", cchCount1=-1, lpString2="REG_SZ", cchCount2=-1) returned 2
	[0040.165] LocalFree (hMem=0x22f83e749a0) returned 0x0
	[0040.165] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/d", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 2
	[0040.165] lstrlenW (lpString="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe") returned 33
	[0040.165] GetProcessHeap () returned 0x22f83e70000
	[0040.165] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x44) returned 0x22f83e742c0
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/t", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-t", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-s", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1
	[0040.165] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/f", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 2
	[0040.165] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.165] RegCreateKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0x22f0002001f, lpSecurityAttributes=0x0, phkResult=0x941187f640, lpdwDisposition=0x941187f658 | out: phkResult=0x941187f640*=0x90, lpdwDisposition=0x941187f658*=0x2) returned 0x0
	[0040.165] RegQueryValueExW (in: hKey=0x90, lpValueName="svchos", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x0) returned 0x2
	[0040.165] lstrlenW (lpString="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe") returned 33
	[0040.165] RegSetValueExW (in: hKey=0x90, lpValueName="svchos", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe", cbData=0x44 | out: lpData="C:\\Users\\FD1HVy\\Desktop\\DfyLx.exe") returned 0x0
	[0040.169] RegCloseKey (hKey=0x90) returned 0x0
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e746b0) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e746b0) returned 0x5c
	[0040.169] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e746b0) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74230) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74230) returned 0x88
	[0040.169] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74230) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74d60) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74d60) returned 0xe
	[0040.169] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74d60) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e742c0) returned 1
	[0040.169] GetProcessHeap () returned 0x22f83e70000
	[0040.169] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e742c0) returned 0x44
	[0040.169] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e742c0) returned 1
	[0040.169] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.169] GetLastError () returned 0x0
	[0040.169] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x0, dwLanguageId=0x0, lpBuffer=0x941187f5c0, nSize=0x0, Arguments=0x0 | out: lpBuffer="䈰菧ȯ") returned 0x27
	[0040.170] GetLastError () returned 0x0
	[0040.170] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
	[0040.170] GetProcessHeap () returned 0x22f83e70000
	[0040.170] GetProcessHeap () returned 0x22f83e70000
	[0040.170] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e741b0) returned 1
	[0040.170] GetProcessHeap () returned 0x22f83e70000
	[0040.170] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e741b0) returned 0x2
	[0040.170] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e741b0) returned 1
	[0040.170] GetProcessHeap () returned 0x22f83e70000
	[0040.170] RtlAllocateHeap (HeapHandle=0x22f83e70000, Flags=0xc, Size=0x50) returned 0x22f83e74290
	[0040.170] RtlRestoreLastWin32Error () returned 0x9411693000
	[0040.170] LocalFree (hMem=0x22f83e74230) returned 0x0
	[0040.170] __iob_func () returned 0x7ff931acea00
	[0040.170] _fileno (_File=0x7ff931acea30) returned 1
	[0040.170] _errno () returned 0x22f84010850
	[0040.170] _get_osfhandle (_FileHandle=1) returned 0x50
	[0040.171] _errno () returned 0x22f84010850
	[0040.171] GetFileType (hFile=0x50) returned 0x2
	[0040.171] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50
	[0040.171] GetFileType (hFile=0x50) returned 0x2
	[0040.171] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x941187f540 | out: lpMode=0x941187f540) returned 1
	[0040.187] __iob_func () returned 0x7ff931acea00
	[0040.187] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50
	[0040.187] lstrlenW (lpString="The operation completed successfully.\r\n") returned 39
	[0040.187] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x22f83e74290*, nNumberOfCharsToWrite=0x27, lpNumberOfCharsWritten=0x941187f5b0, lpReserved=0x0 | out: lpBuffer=0x22f83e74290*, lpNumberOfCharsWritten=0x941187f5b0*=0x27) returned 1
	[0040.193] GetProcessHeap () returned 0x22f83e70000
	[0040.193] GetProcessHeap () returned 0x22f83e70000
	[0040.193] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74910) returned 1
	[0040.193] GetProcessHeap () returned 0x22f83e70000
	[0040.193] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74910) returned 0x86
	[0040.193] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74910) returned 1
	[0040.193] GetProcessHeap () returned 0x22f83e70000
	[0040.193] GetProcessHeap () returned 0x22f83e70000
	[0040.193] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74d40) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74d40) returned 0x18
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74d40) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78e10) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78e10) returned 0x20
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78e10) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78d80) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78d80) returned 0x1e
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78d80) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e72a50) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e72a50) returned 0x18
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e72a50) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78f00) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78f00) returned 0x20
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78f00) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74290) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74290) returned 0x50
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74290) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e741d0) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e741d0) returned 0x20
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e741d0) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74e00) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74e00) returned 0x20
	[0040.194] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74e00) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.194] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74e30) returned 1
	[0040.194] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74e30) returned 0x20
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74e30) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74e60) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74e60) returned 0x20
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74e60) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74de0) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74de0) returned 0x18
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74de0) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74a00) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74a00) returned 0x20
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74a00) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74a50) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74a50) returned 0x20
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74a50) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78f90) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78f90) returned 0x20
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78f90) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78fc0) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78fc0) returned 0x20
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78fc0) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74a30) returned 1
	[0040.195] GetProcessHeap () returned 0x22f83e70000
	[0040.195] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74a30) returned 0x18
	[0040.195] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74a30) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78cf0) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78cf0) returned 0x20
	[0040.196] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78cf0) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78f60) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78f60) returned 0x20
	[0040.196] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78f60) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e74a80) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e74a80) returned 0x18
	[0040.196] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e74a80) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e78db0) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e78db0) returned 0x20
	[0040.196] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e78db0) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] HeapValidate (hHeap=0x22f83e70000, dwFlags=0x0, lpMem=0x22f83e72f70) returned 1
	[0040.196] GetProcessHeap () returned 0x22f83e70000
	[0040.196] RtlSizeHeap (HeapHandle=0x22f83e70000, Flags=0x0, MemoryPointer=0x22f83e72f70) returned 0x18
	[0040.196] RtlFreeHeap (HeapHandle=0x22f83e70000, Flags=0x0, BaseAddress=0x22f83e72f70) returned 1
	[0040.196] exit (_Code=0) 

Thread:
	id = 103
	os_tid = 0xd94


Process:
	id = "9"
	image_name = "shellexperiencehost.exe"
	filename = "c:\\windows\\systemapps\\shellexperiencehost_cw5n1h2txyewy\\shellexperiencehost.exe"
	page_root = "0x3e2f5000"
	os_pid = "0xb50"
	os_integrity_level = "0x1000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "\"C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\ShellExperienceHost.exe\" -ServerName:App.AppXtk181tbxbce2qsex02s8tw7hfxa9xb3t.mca"
	cur_dir = "C:\\Windows\\SystemApps\\ShellExperienceHost_cw5n1h2txyewy\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 76
	os_tid = 0xe34


Thread:
	id = 77
	os_tid = 0xde8


Thread:
	id = 78
	os_tid = 0xde4


Thread:
	id = 79
	os_tid = 0xde0


Thread:
	id = 80
	os_tid = 0xcb4


Thread:
	id = 81
	os_tid = 0xcb0


Thread:
	id = 82
	os_tid = 0xca8


Thread:
	id = 83
	os_tid = 0xca4


Thread:
	id = 84
	os_tid = 0xc08


Thread:
	id = 85
	os_tid = 0x6e0


Thread:
	id = 86
	os_tid = 0x6d0


Thread:
	id = 87
	os_tid = 0x8c8


Thread:
	id = 88
	os_tid = 0x69c


Thread:
	id = 89
	os_tid = 0x79c


Thread:
	id = 90
	os_tid = 0x634


Thread:
	id = 91
	os_tid = 0xbe0


Thread:
	id = 92
	os_tid = 0xbdc


Thread:
	id = 93
	os_tid = 0xbd4


Thread:
	id = 94
	os_tid = 0xbd0


Thread:
	id = 95
	os_tid = 0xba4


Thread:
	id = 96
	os_tid = 0xba0


Thread:
	id = 97
	os_tid = 0xb9c


Thread:
	id = 98
	os_tid = 0xb94


Thread:
	id = 99
	os_tid = 0xb8c


Thread:
	id = 100
	os_tid = 0xb88


Thread:
	id = 101
	os_tid = 0xb68


Thread:
	id = 102
	os_tid = 0xb54


Thread:
	id = 104
	os_tid = 0x3fc


Process:
	id = "10"
	image_name = "searchui.exe"
	filename = "c:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe"
	page_root = "0x3e0f6000"
	os_pid = "0xb58"
	os_integrity_level = "0x1000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "\"C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\SearchUI.exe\" -ServerName:CortanaUI.AppXa50dqqa5gqv4a428c9y1jjw7m3btvepj.mca"
	cur_dir = "C:\\Windows\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 106
	os_tid = 0xdd4


Thread:
	id = 107
	os_tid = 0xdd0


Thread:
	id = 108
	os_tid = 0xb74


Thread:
	id = 109
	os_tid = 0xb70


Thread:
	id = 110
	os_tid = 0x590


Thread:
	id = 111
	os_tid = 0x578


Thread:
	id = 112
	os_tid = 0x6c4


Thread:
	id = 113
	os_tid = 0x6d4


Thread:
	id = 114
	os_tid = 0x588


Thread:
	id = 115
	os_tid = 0x828


Thread:
	id = 116
	os_tid = 0x630


Thread:
	id = 117
	os_tid = 0x7c4


Thread:
	id = 118
	os_tid = 0x7a0


Thread:
	id = 119
	os_tid = 0x438


Thread:
	id = 120
	os_tid = 0x778


Thread:
	id = 121
	os_tid = 0x50c


Thread:
	id = 122
	os_tid = 0xbf0


Thread:
	id = 123
	os_tid = 0xbd8


Thread:
	id = 124
	os_tid = 0xbcc


Thread:
	id = 125
	os_tid = 0xbc8


Thread:
	id = 126
	os_tid = 0xbc4


Thread:
	id = 127
	os_tid = 0xbc0


Thread:
	id = 128
	os_tid = 0xbb8


Thread:
	id = 129
	os_tid = 0xbb0


Thread:
	id = 130
	os_tid = 0xbac


Thread:
	id = 131
	os_tid = 0xba8


Thread:
	id = 132
	os_tid = 0xb7c


Thread:
	id = 133
	os_tid = 0xb5c


Thread:
	id = 141
	os_tid = 0xd48


Process:
	id = "11"
	image_name = "runtimebroker.exe"
	filename = "c:\\windows\\system32\\runtimebroker.exe"
	page_root = "0x3d1f9000"
	os_pid = "0xbf4"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "C:\\Windows\\System32\\RuntimeBroker.exe -Embedding"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 154
	os_tid = 0x734


Thread:
	id = 155
	os_tid = 0xa0c


Thread:
	id = 156
	os_tid = 0x8ac


Thread:
	id = 157
	os_tid = 0x57c


Thread:
	id = 158
	os_tid = 0x61c


Thread:
	id = 159
	os_tid = 0xbf8


Thread:
	id = 190
	os_tid = 0x260

	[0049.124] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0049.124] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="LoadLibraryA") returned 0x7ff92fdee490
	[0049.124] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff9232d0000
	[0049.130] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff931520000
	[0049.229] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff9315e0000
	[0049.229] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff9300e0000
	[0049.249] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff92da00000
	[0049.523] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLastError") returned 0x7ff92fde33c0
	[0049.523] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualFree") returned 0x7ff92fdea3e0
	[0049.523] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptExportKey") returned 0x7ff931535410
	[0049.524] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="DeleteFileW") returned 0x7ff92fdf2130
	[0049.524] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetDriveTypeW") returned 0x7ff92fdf22c0
	[0049.524] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCommandLineW") returned 0x7ff92fdedbe0
	[0049.533] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetStartupInfoW") returned 0x7ff92fdebf50
	[0049.533] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindNextFileW") returned 0x7ff92fdf2230
	[0049.533] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualAlloc") returned 0x7ff92fde97f0
	[0049.534] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameA") returned 0x7ff9315622e0
	[0049.534] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ExitProcess") returned 0x7ff92fdec0d0
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff92fe07cd0
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessA") returned 0x7ff92fdeb190
	[0049.535] GetProcAddress (hModule=0x7ff92da00000, lpProcName="GetIpNetTable") returned 0x7ff92da0fcc0
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetVersionExW") returned 0x7ff92fde9a70
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff92fe07cc0
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff92fdee860
	[0049.535] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameW") returned 0x7ff9315353c0
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ReadFile") returned 0x7ff92fdf2480
	[0049.535] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegQueryValueExA") returned 0x7ff9315354e0
	[0049.535] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CloseHandle") returned 0x7ff92fdf1ea0
	[0049.536] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegSetValueExW") returned 0x7ff931535370
	[0049.536] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegCloseKey") returned 0x7ff931534c50
	[0049.536] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileA") returned 0x7ff92fe2a370
	[0049.536] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesW") returned 0x7ff92fdf24f0
	[0049.536] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WinExec") returned 0x7ff92fe2e3b0
	[0049.536] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDeriveKey") returned 0x7ff93154a740
	[0049.536] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptGenKey") returned 0x7ff931539be0
	[0049.536] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Sleep") returned 0x7ff92fde3410
	[0049.536] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCurrentProcess") returned 0x7ff92fdf1e00
	[0049.536] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteW") returned 0x7ff9301df5d0
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSize") returned 0x7ff92fdf2320
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GlobalAlloc") returned 0x7ff92fde7fb0
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindClose") returned 0x7ff92fdf2160
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WaitForMultipleObjects") returned 0x7ff92fdf2070
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameA") returned 0x7ff92fdee000
	[0049.537] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteA") returned 0x7ff9302a1600
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleHandleA") returned 0x7ff92fdec1a0
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameW") returned 0x7ff92fdebfa0
	[0049.537] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileA") returned 0x7ff92fdf20f0
	[0049.538] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSizeEx") returned 0x7ff92fdf2330
	[0049.538] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WriteFile") returned 0x7ff92fdf2570
	[0049.538] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLogicalDrives") returned 0x7ff92fde8dd0
	[0049.538] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetEnumResourceW") returned 0x7ff9232d12d0
	[0049.538] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExW") returned 0x7ff931534aa0
	[0049.538] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetCloseEnum") returned 0x7ff9232d14f0
	[0049.538] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff92fdee9f0
	[0049.538] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesA") returned 0x7ff92fdf24e0
	[0049.538] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExA") returned 0x7ff9315353b0
	[0049.538] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointer") returned 0x7ff92fdf2510
	[0049.539] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetTickCount") returned 0x7ff92fde33d0
	[0049.539] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesW") returned 0x7ff92fdf2300
	[0049.539] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindFirstFileW") returned 0x7ff92fdf21e0
	[0049.539] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptAcquireContextW") returned 0x7ff931535a10
	[0049.539] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="MoveFileExW") returned 0x7ff92fdeec60
	[0049.539] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetOpenEnumW") returned 0x7ff9232d15e0
	[0049.539] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoInitialize") returned 0x7ff9315e7e20
	[0049.539] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDecrypt") returned 0x7ff931539b10
	[0049.539] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptImportKey") returned 0x7ff9315353f0
	[0049.539] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointerEx") returned 0x7ff92fdf2520
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileW") returned 0x7ff92fdf2770
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FreeLibrary") returned 0x7ff92fdebf60
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessW") returned 0x7ff92fdeba30
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateDirectoryW") returned 0x7ff92fdf20d0
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateThread") returned 0x7ff92fde9940
	[0049.540] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDestroyKey") returned 0x7ff9315357e0
	[0049.540] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoCreateInstance") returned 0x7ff92fad5110
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileW") returned 0x7ff92fdf2100
	[0049.540] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesA") returned 0x7ff92fdf22d0
	[0049.540] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptEncrypt") returned 0x7ff93153a1a0
	[0049.541] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegDeleteValueW") returned 0x7ff9315382d0
	[0049.541] GetVersionExW (in: lpVersionInformation=0xe67687f530*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xe67687f530*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0049.541] GetWindowsDirectoryW (in: lpBuffer=0xe67687f5e0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0049.541] SetLastError (dwErrCode=0x0) 
	[0049.541] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0049.541] GetLastError () returned 0x20
	[0049.541] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0049.541] Sleep (dwMilliseconds=0x1388) 
	[0054.682] Sleep (dwMilliseconds=0x2328) 
	[0063.748] GetWindowsDirectoryW (in: lpBuffer=0xe67687f5e0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0063.748] SetLastError (dwErrCode=0x0) 
	[0063.748] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0063.749] GetLastError () returned 0x20
	[0063.749] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0063.749] Sleep (dwMilliseconds=0x2328) 
	[0072.948] GetWindowsDirectoryW (in: lpBuffer=0xe67687f5e0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0072.948] SetLastError (dwErrCode=0x0) 
	[0072.948] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0072.948] GetLastError () returned 0x20
	[0072.948] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0072.948] Sleep (dwMilliseconds=0x2328) 

Thread:
	id = 275
	os_tid = 0x108c


Process:
	id = "12"
	image_name = "taskhostw.exe"
	filename = "c:\\windows\\system32\\taskhostw.exe"
	page_root = "0x7b495000"
	os_pid = "0xf14"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "taskhostw.exe"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 241
	os_tid = 0x1a4


Thread:
	id = 242
	os_tid = 0xe00


Thread:
	id = 243
	os_tid = 0x390


Thread:
	id = 244
	os_tid = 0xc70


Thread:
	id = 245
	os_tid = 0xfb8


Thread:
	id = 246
	os_tid = 0xf60


Thread:
	id = 247
	os_tid = 0xf5c


Thread:
	id = 248
	os_tid = 0xf58


Thread:
	id = 249
	os_tid = 0xf40


Thread:
	id = 250
	os_tid = 0xf20


Thread:
	id = 251
	os_tid = 0xf18


Thread:
	id = 276
	os_tid = 0x1090

	[0050.962] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0050.963] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="LoadLibraryA") returned 0x7ff92fdee490
	[0050.963] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff9232d0000
	[0050.966] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff931520000
	[0050.966] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff9315e0000
	[0050.966] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff9300e0000
	[0050.966] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff92da00000
	[0050.969] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLastError") returned 0x7ff92fde33c0
	[0050.969] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualFree") returned 0x7ff92fdea3e0
	[0050.969] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptExportKey") returned 0x7ff931535410
	[0050.969] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="DeleteFileW") returned 0x7ff92fdf2130
	[0050.969] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetDriveTypeW") returned 0x7ff92fdf22c0
	[0050.969] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCommandLineW") returned 0x7ff92fdedbe0
	[0050.970] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetStartupInfoW") returned 0x7ff92fdebf50
	[0050.970] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindNextFileW") returned 0x7ff92fdf2230
	[0050.970] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualAlloc") returned 0x7ff92fde97f0
	[0050.970] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameA") returned 0x7ff9315622e0
	[0050.970] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ExitProcess") returned 0x7ff92fdec0d0
	[0050.970] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff92fe07cd0
	[0050.970] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessA") returned 0x7ff92fdeb190
	[0050.970] GetProcAddress (hModule=0x7ff92da00000, lpProcName="GetIpNetTable") returned 0x7ff92da0fcc0
	[0050.971] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetVersionExW") returned 0x7ff92fde9a70
	[0050.971] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff92fe07cc0
	[0050.971] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff92fdee860
	[0050.971] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameW") returned 0x7ff9315353c0
	[0050.971] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ReadFile") returned 0x7ff92fdf2480
	[0050.971] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegQueryValueExA") returned 0x7ff9315354e0
	[0050.971] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CloseHandle") returned 0x7ff92fdf1ea0
	[0050.971] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegSetValueExW") returned 0x7ff931535370
	[0050.972] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegCloseKey") returned 0x7ff931534c50
	[0050.972] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileA") returned 0x7ff92fe2a370
	[0050.972] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesW") returned 0x7ff92fdf24f0
	[0050.972] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WinExec") returned 0x7ff92fe2e3b0
	[0050.972] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDeriveKey") returned 0x7ff93154a740
	[0050.972] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptGenKey") returned 0x7ff931539be0
	[0050.972] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Sleep") returned 0x7ff92fde3410
	[0050.972] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCurrentProcess") returned 0x7ff92fdf1e00
	[0050.973] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteW") returned 0x7ff9301df5d0
	[0050.973] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSize") returned 0x7ff92fdf2320
	[0050.973] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GlobalAlloc") returned 0x7ff92fde7fb0
	[0050.973] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindClose") returned 0x7ff92fdf2160
	[0050.973] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WaitForMultipleObjects") returned 0x7ff92fdf2070
	[0050.973] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameA") returned 0x7ff92fdee000
	[0050.973] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteA") returned 0x7ff9302a1600
	[0050.973] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleHandleA") returned 0x7ff92fdec1a0
	[0050.974] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameW") returned 0x7ff92fdebfa0
	[0050.974] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileA") returned 0x7ff92fdf20f0
	[0050.974] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSizeEx") returned 0x7ff92fdf2330
	[0050.974] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WriteFile") returned 0x7ff92fdf2570
	[0050.974] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLogicalDrives") returned 0x7ff92fde8dd0
	[0050.974] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetEnumResourceW") returned 0x7ff9232d12d0
	[0050.974] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExW") returned 0x7ff931534aa0
	[0050.974] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetCloseEnum") returned 0x7ff9232d14f0
	[0050.975] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff92fdee9f0
	[0050.975] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesA") returned 0x7ff92fdf24e0
	[0050.975] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExA") returned 0x7ff9315353b0
	[0050.975] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointer") returned 0x7ff92fdf2510
	[0050.975] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetTickCount") returned 0x7ff92fde33d0
	[0050.975] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesW") returned 0x7ff92fdf2300
	[0050.975] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindFirstFileW") returned 0x7ff92fdf21e0
	[0050.975] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptAcquireContextW") returned 0x7ff931535a10
	[0050.976] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="MoveFileExW") returned 0x7ff92fdeec60
	[0050.976] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetOpenEnumW") returned 0x7ff9232d15e0
	[0050.976] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoInitialize") returned 0x7ff9315e7e20
	[0050.976] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDecrypt") returned 0x7ff931539b10
	[0050.976] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptImportKey") returned 0x7ff9315353f0
	[0050.976] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointerEx") returned 0x7ff92fdf2520
	[0050.976] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileW") returned 0x7ff92fdf2770
	[0050.976] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FreeLibrary") returned 0x7ff92fdebf60
	[0050.977] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessW") returned 0x7ff92fdeba30
	[0050.977] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateDirectoryW") returned 0x7ff92fdf20d0
	[0050.977] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateThread") returned 0x7ff92fde9940
	[0050.977] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDestroyKey") returned 0x7ff9315357e0
	[0050.977] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoCreateInstance") returned 0x7ff92fad5110
	[0050.977] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileW") returned 0x7ff92fdf2100
	[0050.977] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesA") returned 0x7ff92fdf22d0
	[0050.977] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptEncrypt") returned 0x7ff93153a1a0
	[0050.978] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegDeleteValueW") returned 0x7ff9315382d0
	[0050.978] GetVersionExW (in: lpVersionInformation=0x48c4fff540*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x48c4fff540*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0050.978] GetWindowsDirectoryW (in: lpBuffer=0x48c4fff5f0, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0050.978] SetLastError (dwErrCode=0x0) 
	[0050.978] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0050.978] GetLastError () returned 0x20
	[0050.978] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0050.978] Sleep (dwMilliseconds=0x1388) 
	[0056.327] Sleep (dwMilliseconds=0x2328) 

Process:
	id = "13"
	image_name = "msoia.exe"
	filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"
	page_root = "0x354d2000"
	os_pid = "0xfd0"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload mininterval:2880"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 292
	os_tid = 0xdf0


Thread:
	id = 293
	os_tid = 0xfd4


Thread:
	id = 1361
	os_tid = 0x1228


Thread:
	id = 1362
	os_tid = 0x10fc


Process:
	id = "14"
	image_name = "msoia.exe"
	filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"
	page_root = "0x37853000"
	os_pid = "0xff8"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 377
	os_tid = 0xe80


Thread:
	id = 378
	os_tid = 0xffc


Thread:
	id = 2232
	os_tid = 0x1544


Thread:
	id = 2233
	os_tid = 0x149c


Process:
	id = "15"
	image_name = "apphostregistrationverifier.exe"
	filename = "c:\\windows\\system32\\apphostregistrationverifier.exe"
	page_root = "0x3a0d4000"
	os_pid = "0xc14"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "C:\\WINDOWS\\system32\\AppHostRegistrationVerifier.exe"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 578
	os_tid = 0xa8c


Thread:
	id = 579
	os_tid = 0xd34


Thread:
	id = 580
	os_tid = 0x490


Thread:
	id = 581
	os_tid = 0x408


Thread:
	id = 582
	os_tid = 0x9c0


Thread:
	id = 2234
	os_tid = 0x1280


Thread:
	id = 2945
	os_tid = 0x16c8


Process:
	id = "16"
	image_name = "dllhost.exe"
	filename = "c:\\windows\\system32\\dllhost.exe"
	page_root = "0x73788000"
	os_pid = "0x7fc"
	os_integrity_level = "0x2000"
	os_privileges = "0x800000"
	monitor_reason = "injection"
	parent_id = "1"
	os_parent_pid = "0x6c8"
	cmd_line = "C:\\WINDOWS\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "64"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3618
	os_tid = 0xcac


Thread:
	id = 3619
	os_tid = 0xdc4


Thread:
	id = 3620
	os_tid = 0xdb0


Thread:
	id = 3621
	os_tid = 0xda8


Thread:
	id = 3622
	os_tid = 0xdbc


Thread:
	id = 3623
	os_tid = 0xdb8


Thread:
	id = 3624
	os_tid = 0xcc4


Thread:
	id = 3625
	os_tid = 0xbe4


Thread:
	id = 3750
	os_tid = 0x46f0

	[0066.471] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ff92fdd0000
	[0066.472] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="LoadLibraryA") returned 0x7ff92fdee490
	[0066.472] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x7ff9232d0000
	[0066.559] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x7ff931520000
	[0066.559] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7ff9315e0000
	[0066.560] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x7ff9300e0000
	[0066.560] LoadLibraryA (lpLibFileName="Iphlpapi.dll") returned 0x7ff92da00000
	[0066.563] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLastError") returned 0x7ff92fde33c0
	[0066.563] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualFree") returned 0x7ff92fdea3e0
	[0066.564] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptExportKey") returned 0x7ff931535410
	[0066.564] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="DeleteFileW") returned 0x7ff92fdf2130
	[0066.564] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetDriveTypeW") returned 0x7ff92fdf22c0
	[0066.564] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCommandLineW") returned 0x7ff92fdedbe0
	[0066.564] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetStartupInfoW") returned 0x7ff92fdebf50
	[0066.564] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindNextFileW") returned 0x7ff92fdf2230
	[0066.565] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="VirtualAlloc") returned 0x7ff92fde97f0
	[0066.565] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameA") returned 0x7ff9315622e0
	[0066.565] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ExitProcess") returned 0x7ff92fdec0d0
	[0066.565] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64RevertWow64FsRedirection") returned 0x7ff92fe07cd0
	[0066.565] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessA") returned 0x7ff92fdeb190
	[0066.565] GetProcAddress (hModule=0x7ff92da00000, lpProcName="GetIpNetTable") returned 0x7ff92da0fcc0
	[0066.566] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetVersionExW") returned 0x7ff92fde9a70
	[0066.566] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x7ff92fe07cc0
	[0066.566] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetSystemDefaultLangID") returned 0x7ff92fdee860
	[0066.566] GetProcAddress (hModule=0x7ff931520000, lpProcName="GetUserNameW") returned 0x7ff9315353c0
	[0066.566] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="ReadFile") returned 0x7ff92fdf2480
	[0066.566] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegQueryValueExA") returned 0x7ff9315354e0
	[0066.567] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CloseHandle") returned 0x7ff92fdf1ea0
	[0066.567] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegSetValueExW") returned 0x7ff931535370
	[0066.567] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegCloseKey") returned 0x7ff931534c50
	[0066.567] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileA") returned 0x7ff92fe2a370
	[0066.567] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesW") returned 0x7ff92fdf24f0
	[0066.568] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WinExec") returned 0x7ff92fe2e3b0
	[0066.568] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDeriveKey") returned 0x7ff93154a740
	[0066.568] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptGenKey") returned 0x7ff931539be0
	[0066.569] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="Sleep") returned 0x7ff92fde3410
	[0066.569] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetCurrentProcess") returned 0x7ff92fdf1e00
	[0066.569] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteW") returned 0x7ff9301df5d0
	[0066.569] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSize") returned 0x7ff92fdf2320
	[0066.569] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GlobalAlloc") returned 0x7ff92fde7fb0
	[0066.569] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindClose") returned 0x7ff92fdf2160
	[0066.569] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WaitForMultipleObjects") returned 0x7ff92fdf2070
	[0066.570] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameA") returned 0x7ff92fdee000
	[0066.570] GetProcAddress (hModule=0x7ff9300e0000, lpProcName="ShellExecuteA") returned 0x7ff9302a1600
	[0066.570] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleHandleA") returned 0x7ff92fdec1a0
	[0066.570] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetModuleFileNameW") returned 0x7ff92fdebfa0
	[0066.570] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileA") returned 0x7ff92fdf20f0
	[0066.570] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileSizeEx") returned 0x7ff92fdf2330
	[0066.570] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="WriteFile") returned 0x7ff92fdf2570
	[0066.571] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetLogicalDrives") returned 0x7ff92fde8dd0
	[0066.571] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetEnumResourceW") returned 0x7ff9232d12d0
	[0066.571] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExW") returned 0x7ff931534aa0
	[0066.571] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetCloseEnum") returned 0x7ff9232d14f0
	[0066.571] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetWindowsDirectoryW") returned 0x7ff92fdee9f0
	[0066.571] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFileAttributesA") returned 0x7ff92fdf24e0
	[0066.571] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegOpenKeyExA") returned 0x7ff9315353b0
	[0066.572] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointer") returned 0x7ff92fdf2510
	[0066.572] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetTickCount") returned 0x7ff92fde33d0
	[0066.572] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesW") returned 0x7ff92fdf2300
	[0066.572] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FindFirstFileW") returned 0x7ff92fdf21e0
	[0066.572] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptAcquireContextW") returned 0x7ff931535a10
	[0066.572] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="MoveFileExW") returned 0x7ff92fdeec60
	[0066.572] GetProcAddress (hModule=0x7ff9232d0000, lpProcName="WNetOpenEnumW") returned 0x7ff9232d15e0
	[0066.573] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoInitialize") returned 0x7ff9315e7e20
	[0066.573] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDecrypt") returned 0x7ff931539b10
	[0066.573] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptImportKey") returned 0x7ff9315353f0
	[0066.573] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetFilePointerEx") returned 0x7ff92fdf2520
	[0066.573] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileW") returned 0x7ff92fdf2770
	[0066.573] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="FreeLibrary") returned 0x7ff92fdebf60
	[0066.573] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateProcessW") returned 0x7ff92fdeba30
	[0066.574] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateDirectoryW") returned 0x7ff92fdf20d0
	[0066.574] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateThread") returned 0x7ff92fde9940
	[0066.574] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptDestroyKey") returned 0x7ff9315357e0
	[0066.574] GetProcAddress (hModule=0x7ff9315e0000, lpProcName="CoCreateInstance") returned 0x7ff92fad5110
	[0066.574] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CreateFileW") returned 0x7ff92fdf2100
	[0066.574] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="GetFileAttributesA") returned 0x7ff92fdf22d0
	[0066.575] GetProcAddress (hModule=0x7ff931520000, lpProcName="CryptEncrypt") returned 0x7ff93153a1a0
	[0066.575] GetProcAddress (hModule=0x7ff931520000, lpProcName="RegDeleteValueW") returned 0x7ff9315382d0
	[0066.575] GetVersionExW (in: lpVersionInformation=0xf1006ff480*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xf1006ff480*(dwOSVersionInfoSize=0x114, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1
	[0066.575] GetWindowsDirectoryW (in: lpBuffer=0xf1006ff530, uSize=0x32 | out: lpBuffer="C:\\WINDOWS") returned 0xa
	[0066.575] SetLastError (dwErrCode=0x0) 
	[0066.575] CreateFileW (lpFileName="C:\\users\\Public\\sys" (normalized: "c:\\users\\public\\sys"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2, hTemplateFile=0x0) returned 0xffffffffffffffff
	[0066.575] GetLastError () returned 0x20
	[0066.575] CloseHandle (hObject=0xffffffffffffffff) returned 1
	[0066.575] Sleep (dwMilliseconds=0x1388) 
	[0071.641] Sleep (dwMilliseconds=0x2328)